Manager - Data Privacy and Ethics.Risk and Compliance

Reports To:

Senior Manager - Regulatory Compliance and Ethics management DPO

Division:

Risk and Compliance

Mission:

• Ensure the protection of personal data and sensitive information across the organization, fostering trust with customers, vendors, and stakeholders, while minimizing risk and ensuring compliance with data protection regulations.
• Promote an ethical culture based on MTN’s Code of Ethics, shared values and vital behaviors in the interest of all stakeholders.
• Coordinate all ethics management activities and elicit employee commitment to ethical behaviors

Description:

• Develop and implement data protection and ethics management frameworks, strategies, policies, and governance structures across the organisation.
• Oversee annual data privacy compliance audits and ensure timely regulatory filings and reporting obligations.
• Develop and maintain privacy notices, cookie notices, and other compliance documentation across products, websites, and data processing touchpoints.
• Conduct Data Protection Impact Assessments (DPIAs), privacy risk assessments, and ethics risk assessments, and monitor remediation actions.
• Establish and maintain Records of Processing Activities (RoPA), privacy registers, and ethics governance documentation.
• Review information security controls, assessments, and testing activities from a privacy and regulatory compliance perspective.
• Prepare privacy, ethics, compliance, and assurance reports, dashboards, and metrics for Management, Governance Committees, the Board, and Group stakeholders.
• Coordinate ethics and privacy awareness programmes to strengthen regulatory compliance, ethical conduct, and organisational culture.
• Manage the whistleblowing programme and support the objective, confidential, and timely investigation and resolution of ethics-related concerns.
• Monitor ethics and compliance trends, emerging risks, and case outcomes, and recommend appropriate mitigation measures.
• Manage conflict-of-interest disclosure processes and other ethics governance requirements.
• Promote a strong speak-up culture, ethical decision-making, accountability, and protection against retaliation.
• Review and update ethics, privacy, and compliance policies, standards, and procedures to ensure alignment with regulatory requirements and leading practices.
• Embed Privacy by Design and Default principles into products, services, and customer-facing processes.
• Develop and maintain policies, procedures, and controls that safeguard customer information throughout its lifecycle.
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments to identify and mitigate risks to customer data.
• Establish and manage processes for handling data subject rights requests, including access, correction, erasure, restriction, and portability.
• Serve as a trusted advisor on data privacy regulatory requirements, and industry best practices.
• Engage with regulators, business units, vendors, suppliers, and strategic partners on privacy and ethics matters.
• Support the integration of privacy and ethics requirements into business initiatives, products, services, and strategic decision-making.
• Coordinate regulatory registrations, filings, and compliance submissions with relevant data protection authorities.

Education:

• First degree in any related field
• Data Protection certification (e.g., CIPP, CIPT).
• Ethics Officer Certification will be an added advantage
• Fluent in English

Experience:

6 - 13 years’ experience which includes:

• At least 3 Years of experience in data protection, privacy, or related field
• Proven experience in leading data protection programs and managing data breaches
• Experience working with senior management
• Experience working with cross-functional teams and stakeholders
• Experience in change management initiatives, and privacy implementation
• Familiarity with data protection technical controls
• In depth experience and understanding of the Nigerian telecommunications industry and regulatory framework
• Effective stakeholder relationship management experience in a telecom’s regulatory environment
• Knowledge and experience of best practice ethics and governance frameworks, methodologies and emerging practice, risk assessments in the context of the Nigerian and global telecommunications industry.
• Experience in policy governance and development of ethics related programs
• Strong and effective business communication (verbal and writing skills)