Compliance, Data Protection & Certification Manager

About the role

Heirs Technologies seeks a Compliance, Data Protection and Certification Manager to own and manage the company’s regulatory obligations, data protection program, and multi-system certifications. This role leads the programme across NDPC, CBN, NITDA, NRS, ngCERT, PCI SSC, PenCom, NSITF and related bodies, and drives ISO and SOC readiness.

What you'll do

• Own the obligations register and compliance calendar with monthly attestations from owners.
• Lead the data protection programme with the DPO, including processing records, impact assessments and vendor agreements.
• Manage regulatory incident clocks and maintain response playbooks with CISO and Legal.
• Plan and evidence data residency against regulatory requirements before deadlines.
• Run and coordinate the integrated management system for ISO 27001, 9001, 22301 and 20000-1, including audits and recertification.
• Coordinate attestations (SOC 2 Type II, SOC 1 readiness, PCI DSS) and maintain the client assurance pack.

What they're looking for

• 7+ years in compliance, data protection or management-system roles in a regulated tech, fintech or banking environment.
• Deep knowledge of NDPA 2023, GAID 2025, and CBN/NITDA frameworks.
• ISO/IEC 27001 Lead Auditor or Implementer; experience with at least one of ISO 9001, 22301 or 20000-1; SOC 2 or PCI DSS project experience.
• NDPC-recognised DPO credential; CIPP/E or CIPM an advantage; legal training an advantage.
• Experience coordinating certification bodies, audits and client due diligence responses.

For applicants in Nigeria

• The listing states Lagos, NG as the location with eligibility inNigeria, so applicants in Nigeria are eligible.
• The listing does not specify timezone expectations beyond Nigeria; confirm during interview.
• Pay currency or range is not stated; not inventing figures. Confirm in interview.
• The listing does not specify contractor versus employee status; confirm in interview.