MTN JOB - Manager - Data Privacy and Ethics.Risk and Compliance

Key Responsibilities

• Develop and implement data protection and ethics management frameworks, strategies, policies, and governance structures across the organisation.
• Oversee annual data privacy compliance audits and ensure timely regulatory filings and reporting obligations.
• Develop and maintain privacy notices, cookie notices, and other compliance documentation across products, websites, and data processing touchpoints.
• Conduct Data Protection Impact Assessments (DPIAs), privacy risk assessments, and ethics risk assessments, and monitor remediation actions.
• Establish and maintain Records of Processing Activities (RoPA), privacy registers, and ethics governance documentation.
• Review information security controls, assessments, and testing activities from a privacy and regulatory compliance perspective.
• Prepare privacy, ethics, compliance, and assurance reports, dashboards, and metrics for Management, Governance Committees, the Board, and Group stakeholders.
• Coordinate ethics and privacy awareness programmes to strengthen regulatory compliance, ethical conduct, and organisational culture.
• Manage the whistleblowing programme and support the objective, confidential, and timely investigation and resolution of ethics-related concerns.
• Monitor ethics and compliance trends, emerging risks, and case outcomes, and recommend appropriate mitigation measures.
• Manage conflict-of-interest disclosure processes and other ethics governance requirements.
• Promote a strong speak-up culture, ethical decision-making, accountability, and protection against retaliation.
• Review and update ethics, privacy, and compliance policies, standards, and procedures to ensure alignment with regulatory requirements and leading practices.
• Embed Privacy by Design and Default principles into products, services, and customer-facing processes.
• Develop and maintain policies, procedures, and controls that safeguard customer information throughout its lifecycle.
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments to identify and mitigate risks to customer data.
• Establish and manage processes for handling data subject rights requests, including access, correction, erasure, restriction, and portability.
• Serve as a trusted advisor on data privacy regulatory requirements, and industry best practices.
• Engage with regulators, business units, vendors, suppliers, and strategic partners on privacy and ethics matters.
• Support the integration of privacy and ethics requirements into business initiatives, products, services, and strategic decision-making.
• Coordinate regulatory registrations, filings, and compliance submissions with relevant data protection authorities.