Data Protection Officer

ICS Outsourcing is Nigeria’s pioneer Human Resource Outsourcing Company. We are on a mission to provide world-class human resource solutions, using experts while creating value for our shareholders and opportunities in the community. Our vision is to be the most valuable Business Support Solutions Partner to our Clients throughout Africa and beyond.

We are recruiting to fill the position below:

Job Position: Data Protection Officer / Information Security Officer (ISO / DPO)

Job Location: Lagos
Employment Type: Full-time
Role Level: Experienced Analyst – Associate
Department: Technology

About the Role

• We are looking for an experienced and proactive Information Security & Data Protection Officer to lead the protection of our digital assets, safeguard customer data, and drive our Information Security Management System (ISMS).
• In this dual-impact role, you will oversee end-to-end data privacy compliance (NDPR), manage cybersecurity risk, perform technical control assessments, and collaborate directly with executive leadership to ensure our technology ecosystem remains secure, resilient, and compliant.

Key Responsibilities

• Data Protection & Compliance: Lead the company's data privacy strategy, conduct Data Protection Impact Assessments (DPIAs), manage data subject requests, and enforce compliance with NDPR and relevant laws.
• Information Security & Risk Management: Establish and continually improve our ISMS. Perform periodic risk assessments, execute vulnerability assessments (VAPT), and implement risk treatment plans.
• Incident & Access Control: Oversee security incident management workflows, enforce segregation of duties (maker-checker controls), and monitor database access controls.
• Technical Oversight & Monitoring: Conduct daily application server checks, develop SQL/Oracle scripts for automated reporting, and perform API/application security testing.
• Stakeholder & Audit Collaboration: Serve as the main point of contact for regulatory bodies and internal/external auditors, while collaborating across business units to build key risk indicators (KRIs) and risk registers.

Key Requirements

• Education: B.Sc. in Computer Science, IT, Computer Engineering, Finance, or a related field (Minimum 2:1).
• Experience: 5+ years of hands-on experience in Information Security and Data Protection roles (experience in the Nigerian Capital Market or Financial Services is highly preferred).
• Certifications: At least one relevant professional certification (e.g., CISA, CISM, CRISC, CEH, CDPO, CIPP, or ISO 27001 Lead Auditor/Implementer).
• Technical Skills: Deep knowledge of information security frameworks, NDPR regulations, GRC tools, SQL/database scripting, and vulnerability testing tools (Swagger, Postman, etc.).
• Soft Skills: Exceptional analytical problem-solving, strong communication, and the ability to partner effectively with executive leadership.

Salary
N500,000 - N800,000 per month.