Data Protection Officer (DPO)

Data Protection Officer (DPO)

LunaVax Institute Nigeria

Part-Time Contract | Remote (Nigeria-based)

About LunaVax Institute Nigeria

LunaVax Institute Nigeria is a research and implementation organisation advancing vaccine access through research, innovation and implementation science. As our programmes develop, we are integrating data protection and privacy into the design and implementation of our research.

Our Current Work

We are developing a planned Phase III effectiveness-implementation study evaluating a needle-free measles-rubella microarray patch against standard injection in infants and toddlers across four Nigerian states, including facility and outreach settings.

The study will involve children's health information, caregiver and health worker data, and optional biometric-supported vaccination verification using digital data collection platforms and third-party technology partners. A preparatory pilot will come first.

The DPO will help establish the data protection framework for this work before participant data collection begins.

The Role

We are seeking a certified Data Protection Officer to provide independent oversight and guidance on data protection compliance under the Nigeria Data Protection Act 2023 (NDPA) and the NDP Act General Application and Implementation Directive (GAID) 2025.

The DPO will report directly to management and work independently alongside our research, technical, regulatory and operations teams.

Key Responsibilities

• Advise on and support NDPC registration and the ongoing data protection compliance workstream
• Lead and provide independent oversight of Data Privacy Impact Assessments (DPIAs), including vetting and signing them in line with GAID 2025
• Advise on lawful bases, consent, privacy notices, data minimisation and retention, including for children's health and biometric data
• Review data processing agreements with research partners and technology providers, and advise on cross-border data transfers
• Oversee data security, breach response and data subject rights procedures
• Develop and maintain data protection policies, procedures and documentation
• Prepare periodic data protection reports for management
• Support Compliance Audit Returns (CAR) and other applicable regulatory requirements
• Train staff and field teams on data protection practices

Requirements

• Current DPO certification meeting applicable NDPC requirements, with verifiable training and examination credentials
• Enrolment on the NDPC DPO database, or eligibility for enrolment
• Strong working knowledge of the NDPA 2023 and GAID 2025
• Practical experience with DPIAs and sensitive personal data
• Ability to work independently and maintain confidentiality
• No conflict of interest with LunaVax Institute's processing activities

Desirable Experience

• Health research, clinical research or public health
• Children's, health or biometric data
• Research ethics and participant data governance
• Digital health platforms and identity systems
• Data processing agreements and cross-border transfers
• Working with a licensed Data Protection Compliance Organisation (DPCO)

What You'll Gain

• The opportunity to shape the data protection framework for a pioneering vaccine implementation study in Nigeria
• Hands-on experience with children's health data, biometric verification and digital health systems in a research setting
• Collaboration with research, technical, regulatory and global health partners
• A flexible, part-time role with potential to grow as our programmes expand

Engagement

Part-time contract. The time commitment will be agreed based on current needs and the compliance workstream. Occasional in-person engagement (for example, staff training or regulatory meetings) may be required.

Compensation: retainer or stipend, to be discussed based on experience, certification and scope.

LunaVax Institute Nigeria is an equal opportunity organisation. We value diversity and are committed to an inclusive environment for all team members.