Data Privacy Officer at Access Bank

Impact on Business Results:

• Reduces regulatory fines and legal exposure through compliance with POPIA and GDPR
• Protects bank reputation and strengthens customer trust by safeguarding personal data
• Enables faster, compliant product launches by embedding privacy-by-design
• Improves operational efficiency by reducing incidents, rework, and audit findings

Requirements

Data Privacy Governance & Compliance:

• Develop, implement, and oversee the organization’s data privacy strategy and policies.
• Ensure compliance with applicable data protection laws (e.g., POPIA, GDPR, and other relevant regulations).
• Maintain and update privacy frameworks, standards, and procedures.
• Monitor regulatory changes and advise the business on implications.

Legal Advisory & Risk Management:

• Provide legal guidance on data protection obligations, contracts, and data-sharing agreements.
• Conduct privacy impact assessments (PIAs/DPIAs) and risk assessments.
• Advise on cross-border data transfers and third-party data processing risks.
• Support legal teams in managing data breaches, investigations, and regulatory inquiries.

Data Protection Operations:

• Oversee data mapping, classification, and records of processing activities.
• Ensure appropriate data retention and deletion practices are in place.
• Collaborate with IT and Security teams to ensure privacy-by-design and privacy-by default principles.
• Review and approve data protection controls in systems and projects.

Stakeholder Engagement:

• Act as the primary point of contact for regulators, auditors, and internal stakeholders on privacy matters.
• Liaise between Legal, IT, Compliance, Risk, and Business Units.
• Provide expert input into business initiatives involving personal data.

Training Awareness:

• Develop and deliver privacy training and awareness programs across the organization.
• Promote a culture of data protection and ethical data use.

Incident and Breach Management:

• Lead response to data breaches and privacy incidents.
• Ensure timely reporting to regulators and affected parties where required.
• Maintain incident logs and implement corrective actions.

Policies and Procedures:

• Develop, implement, and maintain data privacy policies, standards, and SOPs
• Ensure adherence to internal governance frameworks and regulatory requirements (e.g., POPIA)
• Oversee data classification, retention, access control, and breach response procedures
• Regularly review, update, and embed policies through audits, training, and controls

People Management:

• Drive training and awareness programs to build a privacy-first culture across the bank
• Collaborate and influence senior stakeholders across Legal, IT, Risk, and Business Units
• Set clear objectives, monitor performance, and ensure accountability within the team

Academic Requirement:

• Bachelor’s degree in Law, Information Technology, or related field (LLB preferred for Legal alignment).
• Postgraduate qualification or certification in Data Privacy (e.g., CIPP/E, CIPM) is advantageous.

Work Experience:

• 5–10+ years’ experience in data privacy, legal compliance, or information security.
• Proven experience transitioning or working across IT and Legal functions is highly desirable.