Chief Data Privacy Officer Job Vacancy in Maseru, Lesotho – Financial Services & Data Protection

Job Description

Position:Chief Data Privacy Officer

Company:Ecobank Lesotho

Location:Maseru, Lesotho

Experience:10+ years in data privacy, compliance, and information security

Education:Master’s degree in Law, Information Security, or related field

Employment Type:Full-time

Industry:Financial Services & Data Protection

Department:Compliance & Risk Management

Salary:SSP 800,000 – 1,200,000 per annum

Vacancies:1

Company Overview

Ecobank Lesotho is a leading pan-African banking institution delivering innovative financial solutions across the continent. With a strong commitment to digital transformation, the bank supports individuals, SMEs, and large corporations in achieving their financial goals. Ecobank’s presence in Lesotho is marked by a robust network of branches, advanced mobile banking platforms, and a focus on inclusive banking. The organization prides itself on fostering a culture of integrity, customer centricity, and continuous improvement, making it an attractive employer for professionals seeking impactful careers in the financial sector.

As part of the broader Ecobank Group, the Lesotho subsidiary aligns with regional strategies that emphasize regulatory compliance, risk mitigation, and data protection. The bank’s dedication to safeguarding client information and adhering to international privacy standards positions it as a trusted partner for both local and international stakeholders. This environment offers a unique opportunity for a senior privacy leader to shape policy, drive compliance initiatives, and influence the future of data governance in the region.

Job Overview

The Chief Data Privacy Officer (CDPO) will lead Ecobank Lesotho’s data privacy program, ensuring compliance with the Lesotho Data Protection Act, GDPR, and other relevant regulations. Reporting directly to the Chief Risk Officer, the CDPO will develop, implement, and monitor privacy policies, conduct impact assessments, and serve as the primary liaison with regulators and auditors. This role is pivotal in embedding a privacy‑by‑design mindset across all business units, protecting customer data, and enhancing the bank’s reputation for security and trust.

For more information about our career portal, visit https://lesothojobsearch.com.

Additional resources and regional job listings are available at https://www.mauritiusjobsearch.com/.

Key Responsibilities

• Develop and maintain a comprehensive data privacy framework aligned with local and international regulations.
• Lead privacy impact assessments (PIAs) for new products, services, and technology initiatives.
• Advise senior management and business units on privacy risks and mitigation strategies.
• Establish and oversee data subject request processes, ensuring timely and compliant responses.
• Coordinate with the IT security team to implement technical safeguards such as encryption, access controls, and monitoring.
• Conduct regular privacy training and awareness programs for employees at all levels.
• Manage relationships with data protection authorities, auditors, and external consultants.
• Monitor legislative developments and update policies accordingly.
• Prepare and present privacy reports to the Board of Directors and executive committees.
• Oversee incident response related to data breaches, including root‑cause analysis and remediation.

Required Skills

• In‑depth knowledge of the Lesotho Data Protection Act, GDPR, and other relevant privacy regulations.
• Proven experience in designing and implementing privacy programs within the financial services sector.
• Strong analytical and risk assessment capabilities.
• Excellent communication and stakeholder management skills.
• Ability to translate complex legal requirements into practical business processes.
• Leadership experience with a track record of building high‑performing compliance teams.
• Familiarity with data security technologies and privacy‑enhancing tools.
• Certification such as CIPP/E, CIPM, or equivalent is highly desirable.

Education

A Master’s degree in Law, Information Security, Computer Science, or a related discipline is required. Additional certifications in privacy or information security strengthen the candidate’s profile.

Experience

Minimum of ten years of progressive experience in data privacy, information security, or regulatory compliance, with at least five years in a senior leadership role within the banking or financial services industry.

Salary

The compensation package ranges from SSP 800,000 to SSP 1,200,000 per annum, commensurate with experience and qualifications. The package includes performance‑based bonuses and comprehensive benefits.

Benefits

• Competitive health insurance covering employee and dependents.
• Retirement savings plan with employer contributions.
• Annual performance bonus linked to key privacy and risk metrics.
• Professional development allowance for certifications and conferences.
• Paid parental and family leave.
• Flexible working arrangements and remote work options.

Training

• Ongoing privacy and data protection workshops.
• Access to industry‑leading e‑learning platforms.
• Mentorship programs with senior executives.
• Support for obtaining CIPP/E, CIPM, or similar certifications.

Working Environment

Ecobank Lesotho offers a collaborative, inclusive, and technology‑driven workplace. Employees benefit from modern office spaces, state‑of‑the‑art digital tools, and a culture that encourages innovation and continuous learning. The bank promotes work‑life balance and values diversity across all levels of the organization.

Application Process

Interested candidates should submit their updated CV and a cover letter outlining their relevant experience through the online application portal. Applications will be reviewed on a rolling basis, and shortlisted candidates will be contacted for interviews.

Equal Opportunity Statement

Ecobank Lesotho is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of gender, race, religion, age, disability, or sexual orientation. All qualified applicants will receive consideration for employment.