Manager - Data Privacy and Ethics.Risk and Compliance

<div>
<b>Reports To:</b> Senior Manager - Regulatory Compliance and Ethics management DPO
</div>
<div>
<br>
</div>
<div>
<b>Division:</b> Risk and Compliance
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<b>Mission:</b>
</div>
<blockquote style="margin:0 0 0 40px;border:none;padding:0px">
<div>
<ul>
<li>Ensure the protection of personal data and sensitive information across the organization, fostering trust with customers, vendors, and stakeholders, while minimizing risk and ensuring compliance with data protection regulations.</li>
<li>Promote an ethical culture based on MTN’s Code of Ethics, shared values and vital behaviors in the interest of all stakeholders.</li>
<li>Coordinate all ethics management activities and elicit employee commitment to ethical behaviors</li>
</ul>
</div>
</blockquote>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<b>Description:</b>
</div>
<blockquote style="margin:0 0 0 40px;border:none;padding:0px">
<div>
<ul>
<li>Develop and implement data protection and ethics management frameworks, strategies, policies, and governance structures across the organisation.</li>
<li>Oversee annual data privacy compliance audits and ensure timely regulatory filings and reporting obligations.</li>
<li>Develop and maintain privacy notices, cookie notices, and other compliance documentation across products, websites, and data processing touchpoints.</li>
<li>Conduct Data Protection Impact Assessments (DPIAs), privacy risk assessments, and ethics risk assessments, and monitor remediation actions.</li>
<li>Establish and maintain Records of Processing Activities (RoPA), privacy registers, and ethics governance documentation.</li>
<li>Review information security controls, assessments, and testing activities from a privacy and regulatory compliance perspective.</li>
<li>Prepare privacy, ethics, compliance, and assurance reports, dashboards, and metrics for Management, Governance Committees, the Board, and Group stakeholders.</li>
<li>Coordinate ethics and privacy awareness programmes to strengthen regulatory compliance, ethical conduct, and organisational culture.</li>
<li>Manage the whistleblowing programme and support the objective, confidential, and timely investigation and resolution of ethics-related concerns.</li>
<li>Monitor ethics and compliance trends, emerging risks, and case outcomes, and recommend appropriate mitigation measures.</li>
<li>Manage conflict-of-interest disclosure processes and other ethics governance requirements.</li>
<li>Promote a strong speak-up culture, ethical decision-making, accountability, and protection against retaliation.</li>
<li>Review and update ethics, privacy, and compliance policies, standards, and procedures to ensure alignment with regulatory requirements and leading practices.</li>
<li>Embed Privacy by Design and Default principles into products, services, and customer-facing processes.</li>
<li>Develop and maintain policies, procedures, and controls that safeguard customer information throughout its lifecycle.</li>
<li>Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments to identify and mitigate risks to customer data.</li>
<li>Establish and manage processes for handling data subject rights requests, including access, correction, erasure, restriction, and portability.</li>
<li>Serve as a trusted advisor on data privacy regulatory requirements, and industry best practices.</li>
<li>Engage with regulators, business units, vendors, suppliers, and strategic partners on privacy and ethics matters.</li>
<li>Support the integration of privacy and ethics requirements into business initiatives, products, services, and strategic decision-making.</li>
<li>Coordinate regulatory registrations, filings, and compliance submissions with relevant data protection authorities.</li>
</ul>
</div>
</blockquote>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<b>Education:</b>
</div>
<blockquote style="margin:0 0 0 40px;border:none;padding:0px">
<div>
<ul>
<li>First degree in any related field&nbsp;</li>
<li>Data Protection certification (e.g., CIPP, CIPT).</li>
<li>Ethics Officer Certification will be an added advantage</li>
<li>Fluent in English</li>
</ul>
</div>
</blockquote>
<div>
<br>
</div>
<div>
<b>Experience:</b>
</div>
<div>
6 - 13 years’ experience which includes:
</div>
<blockquote style="margin:0 0 0 40px;border:none;padding:0px">
<div>
<ul>
<li>At least 3 Years of experience in data protection, privacy, or related field</li>
<li>Proven experience in leading data protection programs and managing data breaches</li>
<li>Experience working with senior management&nbsp;</li>
<li>Experience working with cross-functional teams and stakeholders</li>
<li>Experience in change management initiatives, and privacy implementation</li>
<li>Familiarity with data protection technical controls</li>
<li>In depth experience and understanding of the Nigerian telecommunications industry and regulatory framework&nbsp;</li>
<li>Effective stakeholder relationship management experience in a telecom’s regulatory environment</li>
<li>Knowledge and experience of best practice ethics and governance frameworks, methodologies and emerging practice, risk assessments in the context of the Nigerian and global telecommunications industry.&nbsp;&nbsp;</li>
<li>Experience in policy governance and development of ethics related programs</li>
<li>Strong and effective business communication (verbal and writing skills)</li>
</ul>
</div>
</blockquote>