About the Role
Heirs Holdings is an African proprietary investment company with a proven track record of executing successful corporate turnarounds, identifying growth opportunities, and nurturing businesses to maturity. We are currently seeking a dedicated and proactive Compliance, Data Protection & Certification Manager to lead our regulatory frameworks, data protection initiatives, and management system certifications across our expanding operations in Nigeria.
Key Responsibilities- Own the obligations register and compliance calendar across key Nigerian regulatory bodies including NDPC, CBN, NITDA, NRS, ngCERT, PCI SSC, PenCom, NSITF, ITF, and CAC, ensuring monthly attestations.
- Manage the comprehensive data protection programme alongside the DPO, covering registrations, annual audit returns, records of processing, impact assessments, and processor agreements.
- Coordinate regulatory incident response playbooks and clocks with the CISO and Legal teams, maintaining data residency compliance against CBN and NITDA standards.
- Drive the integrated management system across ISO 27001, 9001, 22301, and 20000-1, leading internal audits, management reviews, corrective actions, and upcoming surveillance audits.
- Collaborate with the CISO team to coordinate security attestations including SOC 2 Type II, SOC 1 readiness, and PCI DSS service-provider readiness while maintaining the client assurance pack.
- Execute the internal policy cycle, verify marketing and bid claims for regulatory accuracy, and deliver quarterly regulatory updates to senior management.
- Bachelor's degree in Law, Computer Science, Business Administration, or a related field.
- Minimum of 7 years of professional experience in compliance, data protection, or management-system roles within a regulated technology company, fintech, or commercial bank.
- Deep working knowledge of the Nigeria Data Protection Act (NDPA) 2023, GAID 2025, and relevant CBN and NITDA regulatory frameworks.
- Valid ISO/IEC 27001 Lead Auditor or Implementer certification, with practical experience in at least one of ISO 9001, 22301, or 20000-1.
- NDPC-recognised DPO credential, CIPP/E, CIPM, or relevant legal training will be considered a strong added advantage.
- Competitive salary package commensurate with industry standards and experience.
- Comprehensive health insurance coverage for employee and family.
- Opportunities for professional development and continuous learning in a fast-paced investment environment.
- Dynamic, collaborative work culture that values innovation, integrity, and impactful results across the African continent.