Data Protection Officer

Position purpose

Odunela Group seeks an experienced qualified privacy adviser who will act as the Data Protection Officer to provide independent and professionally competent privacy oversight, advice and review. The appointed professional will support the establishment of privacy governance, personal-data controls, data-protection impact assessments, processing records, privacy notices, data-sharing controls and incident-response arrangements. The professional must maintain sufficient independence from the operational personnel whose work is being reviewed.

Scope of services

The appointed individual or organisation will:

1. assess the Group’s and relevant project entities’ privacy-governance requirements;
2. advise on compliance with applicable data-protection legislation and regulatory guidance;
3. advise whether an entity requires a formally designated Data Protection Officer;
4. review and advise on records of processing activities;
5. review information-asset inventories and personal-data maps;
6. lead or independently review data-protection impact assessments;
7. review lawful-basis assessments;
8. review privacy notices and consent arrangements;
9. advise on special-category, identity, biometric and high-risk personal-data processing;
10. review processor, controller and data-sharing arrangements;
11. advise on data-subject rights procedures;
12. advise on retention, deletion and lawful disposal;
13. review personal-data breach procedures;
14. advise on regulatory notifications and communications;
15. support privacy training;
16. conduct periodic privacy-compliance reviews;
17. report material privacy risks directly to the appropriate accountable authority;
18. maintain records of advice, objections and recommendations.

Required qualifications and experience

Individual applicant

The applicant must demonstrate:

1. recognised professional qualification or substantial specialist experience in privacy or data protection;
2. practical knowledge of Nigerian data-protection requirements;
3. experience conducting or reviewing DPIAs;
4. experience advising on digital platforms, information systems or high-risk processing;
5. evidence of independence and sound professional judgement;
6. strong written advisory and reporting skills;
7. continuing professional-development evidence;
8. professional-indemnity insurance where reasonably applicable.

Organisation applicant

The organisation must demonstrate:

1. a legally registered professional or consultancy practice;
2. a designated lead privacy professional;
3. appropriately qualified supporting personnel;
4. relevant privacy-advisory experience;
5. evidence of similar assignments;
6. professional-indemnity insurance;
7. conflict-management arrangements;
8. confidentiality and information-security controls;
9. continuity arrangements where the lead adviser becomes unavailable.

Deliverables

Expected deliverables may include:

1. privacy-governance assessment;
2. DPO applicability advice;
3. ROPA review;
4. DPIA reports;
5. privacy-risk register;
6. reviewed privacy notices;
7. data-sharing and processor guidance;
8. breach-response protocol;
9. training materials;
10. periodic compliance reports;
11. pre-launch privacy-readiness opinion.

Application requirements

Individual applicant must submit

1. A current professional CV.
2. The CV submission must include or have enclosed as clearly labelled annexes:
3. qualification certificates;
4. relevant professional-membership evidence;
5. current practising or professional-status evidence, where applicable;
6. continuing professional-development evidence;
7. professional-indemnity insurance evidence, where applicable;
8. two relevant client or professional references;
9. evidence of at least two comparable privacy assignments;
10. conflict-of-interest declaration.
11. A Cover Letter containing the applicant’s Statement of Suitability, addressing:
12. relevant privacy experience;
13. understanding of the engagement;
14. proposed delivery approach;
15. availability;
16. proposed fee structure;
17. how professional independence will be maintained.

Organisation applicant must submit

1. A corporate capability profile.
2. A CV for the proposed lead professional and any key supporting professionals.
3. The submission must include or have enclosed as clearly labelled annexes:
4. certificate of incorporation or equivalent registration evidence;
5. corporate profile;
6. professional qualifications of the lead and key personnel;
7. practising or professional-status evidence, where applicable;
8. professional-indemnity insurance;
9. evidence of at least two comparable assignments;
10. two corporate client references;
11. conflict-of-interest declaration;
12. information-security and confidentiality statement;
13. proposed delivery team and continuity arrangement.
14. A Cover Letter containing the organisation’s Statement of Suitability, addressing:
15. relevant organisational capability;
16. the proposed lead professional;
17. delivery methodology;
18. independence safeguards;
19. availability;
20. proposed fee structure.

YOUR APPLICATION WOULD BE REJECTED IF YOU DO NOT COMPLY WITH THIS APPLICATION REQUIREMENTS.

Equal Opportunity Policy

Odunela Group assesses applicants on competence, integrity, evidence, suitability and the approved requirements of the position.

Candidate Privacy

Applicant information will be processed for recruitment, verification and employment-administration purposes in accordance with the candidate privacy information available through the Odunela Group career portal.