Data Protection and Technology Risk Officer at Stresert Services Limited

Our client, who is a dynamic finance company is looking for an enterprising and technology savvy/digital inclined professional to operate in the role of a Data Protection and Technology Risk Officer (DPO). The company is focused on providing Payroll based consumer loans to eligible customers and takes borrowings from individuals. The company currently operates in 25 states in Nigeria and plan on diversifying into other services such as payments business.

Location: Ikeja GRA, Lagos

Job Summary

The Data Protection and Technology Risk Officer (DPO) will champion data protection and technology risk ensuring (1) the personal data of our customers, employees and stakeholders is processed in compliance with the Nigeria Data Protection Regulation (NDPR) and (2) all risk associated with the use of technology are identified, reported and mitigated.

Key Responsibilities:

Data Protection

• Inform and advise the business on NDPR and its requirements, liaising with Legal, IT, Marketing and other teams where necessary.
• Own and keep under constant review all CDL’s data gathering and usage arrangements which includes updating internal policies on data protection.
• Partner with all key areas in the business, in particular the Technology and Marketing Team to ensure data privacy issues are considered at the outset of new product development and initiatives.
• Advising and investigating potential NDPR Breaches
• Ensure data breaches are contained, investigated and remedial actions are taken. Also, notifications and regulatory reporting requirements and communications are managed.

Technology Risk

• Facilitating and improving the Technology Risk Management process.
• Ensuring Technology controls are appropriate, facilitating reporting on compliance to relevant internal stakeholders
• Supporting the development and embedding of underpinning process and procedure documentation, including assisting service/business/process owners with compliance to new policies and operationalising new working practices and procedures.
• Monitor and report on the performance of these processes across the organisation, recommending and implementing enhancements, and closing coverage gaps.
• Completion of supporting documentation templates such as Risk and Control Matrix template and Key Risk Indicators/ Standards template.
• Gap analysis of risk/control record against minimum standards and indicators
• Arrange meetings with risk/control owners for further guidance/review and mitigation.

Technical Competencies:

• Adherence to procedural, regulatory requirements and standards
• Excellent communication skills
• Articulate in both written and verbal communication
• IT literate, proven experience of a working knowledge of MS Office - Excel, Word and Outlook
• Experience in a target driven environment
• Ability to handle conflict or challenges to decision making
• Proven experience of working in a role where attention to detail is critical
• Experience in an operational risk/control environment is an added advantage