Legal Counsel - Data Privacy at M-KOPA Nigeria

M-KOPA is a fast-growing FinTech company offering millions of underbanked customers across Africa access to life-enhancing products and services. From our roots as the pioneer in pay-as-you-go “PayGo’” solar energy for off grid homes, we have grown into one of the most advanced connected asset financing platforms in the world, empowering a broad range of customers to achieve progress in their lives.

We are recruiting to fill the position below:

Job Title: Legal Counsel - Data Privacy

Location: Lagos
Job type: Full time
Department: Legal

Description

• Are you looking for an opportunity to work in a company where progress, and humility are valued as highly as technical excellence? At M-KOPA, we have a team of passionate data privacy counsels ready to building and encouraging an environment where our colleagues feel valued. We encourage knowledge sharing and learning as much as possible.
• We are looking for a Data Privacy Legal Counsel to lead and ensure data privacy compliance in all the markets where M-KOPA operates, including Ghana, Nigeria, Kenya, South Africa, Uganda, and the UK.
• The role offers the flexibility of remote work options.
• This will be a great opportunity to work with our Group Data Protection Officer who is an expert in this area.

Responsibilities
What you will do:

• You will undertake privacy program remediation activities, conduct data audits to ensure compliance and provide advice on the impact of data protection efforts.
• You will conduct Data Protection Impact Assessments (DPIAs) and undertake the assessments following data privacy laws.
• You will identify areas of non or partial compliance with privacy law and rectify any issues.
• You will support implementation of essential elements of the Data Protection legislation, such as the principles of data processing, data subjects' rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches.
• You will review our policies following Data Protection Regulation and codes of practice.
• You will maintain comprehensive records of all data processing activities conducted by our company, including the purposes of all processing activities.
• You will develop guidelines and templates clauses and contracts for management of several team members and relationships relating to processing of personally identifiable information.
• You will raise awareness, brainstorm internal communications and training plans and provide data protection advice and support for members of staff.
• You will develop external communication plan for privacy awareness for third parties and partners.
• You will support in management and administration of privacy software and data incident response and data breach notification procedures.
• You will monitor industry best practice and trends for privacy and consumer protection to keep training material up to date.
• You will identify and use opportunities to improve the quality of data privacy processes and standards.
• Promote a culture of data protection compliance across all units of the organization and suppliers involved in processing personal data.
• Support special projects for our company, including privacy certification, audits, new market expansion, legal & privacy compliance.
• Help with data privacy and consumer protection related due diligence, queries for transactions and from team members.

Requirements
Who we are looking for:

• Over five (5) years' experience working in data protection or privacy compliance.
• A Qualified lawyer in line with your country requirements.
• Experience running data privacy operations including data privacy impact assessments, transfer impact assessments, vendor assessments, risk management.
• Experience with data processing operations, including information systems, data security and data protection needs.
• Expertise on Data Protection laws across M-KOPA markets.
• Privacy Related Professional certification (CIPP, CIPT, PECB IEC/ISO 27001, 27701 Implementer or Auditor) an added advantage.

Your application should include:

• Your experience conducting Data Protection Impact Assessments (DPIAs) and undertake the assessments following data privacy laws.
• Your experience with data processing operations, including information systems, data security and data protection needs.
• Your experience helping with data privacy and consumer protection related due diligence, queries for transactions and from team members.
• Any multijurisdictional data privacy compliance experience

Application Closing Date
Not Specified.

How to Apply
Interested and qualified candidates should:
Click here to apply online