Job Description

Job Description
Job Title: Data Protection Officer

Department: Assurance and Compliance
Business Unit: Pan-Atlantic University/Lagos Business School
Reports To: Head, Assurance and Compliance
Directly Supervises: NIL
Date: January 2021
Position Type: Regular/Permanent/Full Time
Purpose of Position: The Data Protection Officer is the statutory role required by the Nigeria Data
Protection Regulations (NDPR) and the European Union General Data Protection Regulations
(GDPR). The Data Protection Officer (DPO) is responsible for overseeing LBS Privacy Policy and
Data Protection Procedures, and in particular ensuring that LBS meets her regulatory obligations
under the NDPR and the GDPR.
The role will maintain appropriate privacy policy, data protection procedures and related audits
including, but not limited to data collection, processing, sharing, disclosure, retention and disposal as
well as oversee the maintenance of records required to demonstrate LBS compliance with applicable
data protection regulations.
The DPO will act as LBS primary contact point for Data Subjects and the National Information
Technology Development Agency (NITDA); and provide expert advice and support to LBS
employees in relation to all data protection-related queries and incidents.
ESSENTIAL DUTIES/KEY JOB ROLES AND RESPONSIBILITIES include but not

limited to the following:
o Provide leadership, management and direction in relation to all areas of data protection.
o Manage LBS compliance obligations for data protection and advise the School on all matters
related to data protection.
o Monitor changes to the law and regulations on all matters relating to data protection ensuring
that LBS takes timely action to update and implement changes in policies and procedures.
o Manage a programme of awareness-raising and training to deliver compliance and to foster a
data privacy culture within LBS.
o Oversee the maintenance of records required to demonstrate LBS data protection compliance to
regulatory authorities.
o Be the contact point with and co-operate with data subjects when exercising their individual data
rights as well as supervise and advise on the response to such requests.
o Operate as the primary contact point for the NITDA, lead a data incident response and data
breach notification procedure as well as lead the School’s response to any regulatory
investigation or request for information.
o Review data protection clauses in contract terms in conjunction with relevant LBS Legal Support
o Work closely with management and key stakeholders on privacy matters, advising and ensuring
they are regularly updated.
o Maintain and update data privacy notices.
o Advise on data protection impact assessments relating to LBS regulatory requirements.
o Responsible for document management systems within the School.
o Any other job to be assigned by the Head, Assurance and Compliance.
KEY PERFORMANCE INDICATORS

o Up-to-date LBS Personal Data Map
o Data Subjects’ Requests Register with resolutions.
o Demonstration of LBS Compliance with NDPR & GDPR at all times.
o Established LBS Document Management Standard
SKILLS REQUIREMENTS
o Excellent oral and written communication skills
o Strong interpersonal skills capable of dealing with a wide range of stakeholders, including senior
management, and to exercise strong work ethics.
o The ability to plan, organise and prioritise tasks, and to provide clear advice and direction
even when faced with competing demands and short deadlines.
o Proven ability to establish and maintain a high degree of confidentiality, respect, trust and
credibility at all levels.
o Strong team player, enthusiastic and positive, with the ability to remain calm, controlled and
resilient.
o Sound report writing skills.
o Working knowledge of ISO 9001:2015 Standard.
QUALIFICATIONS
o Bachelor’s degree in related discipline. Master’s degree or other advanced degree in related
discipline preferred.
o Expert knowledge of data protection legislation, in particular the NDPR & GDPR with a
Compliance, IT Security, Legal, Audit and/or Risk Management background.
o Additional recognised privacy qualifications e.g. Certified Information Privacy Professional
(CIPP), Certified Information Privacy Technologist (CIPT), etc. (desirable)
o Previous experience of monitoring compliance with regulatory requirements and effectively
engaging regulatory bodies.
o Experience in managing data incidents and breaches.
o Knowledge of cybersecurity risks and other information security standards.
o Experience in a similar role and an understanding of the data protection risks faced by large
data-driven organisations with the ability to conduct the role independently and with integrity.
o Ability to make good judgements regarding data privacy risks and to prioritise resources and
activity around managing those risks.
Professional Qualification
o Membership of relevant professional association/institute is desirable.
EXPERIENCE
o Sound understanding of computer systems, databases and how personal data is collected,
stored and processed with recent experience in privacy & data protection compliance.
o Minimum of five years’ experience on related role is required.
SALARY GRADE
o Administrative
REPORTING LINE
Dean
Head, Assurance and Compliance
Compliance Officer Data Protection Officer

Job Description - Data Protection Officer

Uploaded by

Job Description - Data Protection Officer

Uploaded by

Job Title: Data Protection Officer

ESSENTIAL DUTIES/KEY JOB ROLES AND RESPONSIBILITIES include but not

KEY PERFORMANCE INDICATORS

Head, Assurance and Compliance

Compliance Officer Data Protection Officer

You might also like