Data Privacy Officer at AIICO Insurance

AIICO Insurance Plc. commenced operations in 1963, and became a public liability company in 1989. In 1990, we got listed on the Nigerian Stock Exchange. AIICO Insurance Plc. is the largest Life Insurer in Nigeria. While our Stability, Strength, Security and Trust over the years have placed us at a better advantage in all classes of Life Assurance, our global affiliations have also enable us to provide the widest range of Non-Life insurance solutions to our clients. We are a Financial Services Company supported by a team of experienced professionals and risk management specialists who design bespoke solutions that cater to the versatility of our client individual needs.

Responsibilities
Data Privacy & Protection Operations:

• Support the implementation of data privacy frameworks, controls, and procedures.
• Assist with data mapping and data flow analysis across business units.
• Handle internal data subject access requests (DSARs) and ensure responses within required timelines.
• Maintain the data processing activity register (RoPA).
• Assist in data breach detection, escalation, documentation, and reporting processes.

Third-Party/Vendor Compliance:

• Track and document third-party Data Processing Agreements (DPAs).
• Support third-party risk assessments and due diligence questionnaires.
• Ensure on-boarding documentation includes privacy compliance checklists.

IT GRC Support:

• Assist in performing IT risk assessments and documenting control gaps.
• Maintain and update IT and privacy compliance policies, procedures, and SOPs.
• Support internal audits and external compliance reviews.
• Monitor compliance with security standards (e.g., ISO 27001, NIST, CIS) as related to data privacy.

Training & Awareness:

• Assist in developing and disseminating privacy awareness materials.
• Support scheduling and logistics for employee data protection training.
• Track employee participation and training records.

Documentation & Reporting

• Compile regular status reports for management on privacy/GRC activities.
• Data gathering for preparation of Board committee reports
• Maintain incident logs, risk registers, and audit trails.
• Provide administrative support for privacy meetings, assessments, and compliance initiatives.

Requirements

• Education-Bachelor's Degree in Information Technology, Computer Science, Law, or a related discipline.
• Experience-At least 1-2 years of experience in data privacy, information security, IT GRC, legal advisory or related roles.

Method of Application