Legal and Risk Associate

Full Time

The Legal, Risk, Compliance & Data Protection Associate will support the Foundation in managing its legal, enterprise risk, regulatory compliance and data protection obligations in line with Nigeria Data Protection Act 2023, ensuring that the Foundation operates within applicable laws, regulations, internal policies and good governance standards.


Job title
Legal and Risk Associate

Reports to
Director of Enterprise Management

Closing Date
TBD

Location
Abuja / Lagos


Roles & Responsibilities

  • The Legal and Risk Associate will;

  • Act as primary Data Protection Officer (DPO) of the Foundation

  • Support implementation and continuous improvement of the Foundation's data protection framework, policies and practices in line with the Nigeria Data Protection Act 2023, NDPC GAID 2025 and applicable regulatory guidance including coordination of external audits and management of stakeholders including regulators.

  • Provide timely legal advice on operational, commercial, employment, governance and other matters affecting the Foundation.

  • Review, draft and negotiate contracts, MOUs, service agreements, consultancy agreements, partnership agreements, NDAs and other legal documents.

  • Maintain the organisational risk register; coordinate periodic identification, assessment and documentation of strategic, financial, operational, compliance, legal, technology and reputational risks.

  • Support the implementation and continuous improvement of the Foundation's enterprise risk management framework.

  • Identify and advise on legal risks arising from proposed transactions, projects, partnerships and operational activities.

  • Provide independent legal advice and counsel to leadership and departments on legal matters affecting the Foundation, escalating only matters requiring the Director's or General Counsel's input.

  • Interpret and analyse laws, regulations, and policies relevant to our operations, and translate them into practical guidance for the Foundation, ensuring compliance with legal requirements and ethical standards.

  • Ensure regulatory compliance with statutory filings and engagements as may be required.

  • Design and deliver training to employees on legal and ethical standards.

  • Act as a key legal point of contact for the Foundation's ecosystem partners on legal review, correspondence, and matters arising from those relationships.

  • Research and analyse the implications of new laws and regulations on the Foundation's operations and brief the Director of Enterprise Management on required changes.

  • Supervise, review, and guide the work of the Legal and Compliance Analyst, supporting their development.


Qualifications & Experience

  • LLB / LLM Degree; called to the Nigerian Bar (BL)

  • Certified and practising Data Protection Officer (required).

  • Demonstrated competence reviewing and negotiating contracts, agreements, and MOUs, with an eye for risk and enforceability.

  • Prior experience in a consulting firm is an advantage, along with experience leading teams or having direct reports.

  • Fair understanding of operational risk elements and how they apply to the Foundation's activities.

  • Understanding of public relations engagements and how legal and reputational considerations intersect.

  • Strong understanding of compliance requirements specific to the NGO / not-for-profit sector.

  • Minimum of 5 – 7 years’ post-call experience in law, ideally including exposure to corporate/commercial, contracts, or nonprofit/regulatory compliance work

  • Updated with current laws to provide the best legal counsel and implement preventive measures to processes.

  • Strong academic record with practical grounding in relevant legal areas such as nonprofit law, contracts, and administrative law.

  • Excellent research, reporting writing, and analytical skills

  • Ability to interpret documents, understand procedures, write reports and correspondences.

  • Ability to maintain confidentiality and handle sensitive information with professionalism and discretion.

  • Demonstrated ability to work with minimal supervision and to review, guide, and quality-check the work of junior colleagues.

Technical, Core and Behavioural Competencies

  • Understanding of the NDPA 2023 and related regulatory requirements

  • Understanding of prevailing laws and regulations within and across jurisdictions.

  • Business acumen

  • Enterprise Risk Management

  • Report writing

  • Ethical Judgement

  • Professionalism

  • People Management and Mentoring

  • Analytical Thinking

  • Attention to Details

  • Communication Skills

  • Collaboration and Teamwork

  • Adaptability

  • Flexibility