Legal & Data Protection Advisor

Job Title: Legal & Data Protection Advisor

Company:
VivaFemini

Location:
Remote-first (Nigeria focus)

Engagement:
Part-time / Fractional / Advisory (flexible hours, project-based)

Compensation:
Monthly retainer + success-based incentives (optional) + potential equity options post-fundraise (board-approved)

About VivaFemini

VivaFemini is building Africa's leading digital health ecosystem for women — trusted, culturally relevant, and privacy-first care at your fingertips. We're pre-seed, moving fast, and backed by experienced operators. We are seeking a seasoned legal and data privacy advisor to establish strong legal, regulatory, and privacy foundations on a flexible, outcome-driven basis.

Why this role is special

• Founding impact:
  Set up the legal, regulatory, and privacy frameworks that shape how we launch and scale safely.
• Mission-critical:
  Protect users, partners, and the business across Nigeria and West Africa with pragmatic, compliant systems.
• Flexible runway:
  Advisory engagement with the potential to evolve into General Counsel or Chief Privacy Officer

The Role

You will serve as VivaFemini's primary legal and data protection advisor, supporting contracts, regulatory compliance, partnerships, and health data privacy (NDPR, GDPR, HIPAA-adjacent principles as applicable). You'll work closely with leadership, product, clinical, and operations to ensure safe, ethical, and compliant launch and operations.

What You'll Do

Contracts & Commercial

• Draft, review, and negotiate agreements: partnerships, vendors, employment/contractor, NDAs, SLAs, DPAs.
• Create and maintain contract templates and a lightweight contract lifecycle workflow.

Regulatory & Compliance

• Advise on digital health, telemedicine, advertising, and women's health regulations in Nigeria (and priority expansion markets).
• Establish regulatory compliance checklists and go/no-go gates for launches and campaigns.

Data Protection & Privacy

• Lead NDPR/GDPR-aligned privacy program: privacy policy, consent flows, data mapping, RoPA, DPIAs.
• Design and document lawful bases, retention schedules, cross-border transfer safeguards, and processor oversight.
• Conduct DPIAs and risk assessments for new features, data use, and partnerships.
• Draft and operationalize incident response, breach notification, and user rights request procedures.

Governance, Training & Audit Readiness

• Train team on legal, privacy, and data handling best practices.
• Set up an internal compliance calendar for filings, renewals, and audits.
• Liaise with regulators and external counsel when required.

Stakeholder Support

• Support investor, grant, and partnership due diligence.
• Advise on marketing claims, content standards, and community moderation policies.

Who You Are

• 5–10+ years in legal advisory, data protection, or compliance; healthtech/tech/startup experience is a plus.
• Nigerian-qualified lawyer preferred; strong command of NDPR and practical GDPR application.
• Demonstrated experience with contracts, DPAs, DPIAs, and privacy-by-design in product contexts.
• Clear, pragmatic communicator able to translate legal risks into business decisions.
• Operates well in lean, fast-moving environments with high ownership.

Success Metrics (KPIs)

• 100% of launch-critical contracts and policies reviewed and compliant pre-launch
• Zero critical legal or privacy incidents per quarter
• 100% of new features/products pass DPIA and privacy review before release
• All user rights and regulatory requests handled within defined SLAs
• Team privacy training completion at 100% with documented refresh cadence

Engagement & Compensation

• Retainer:
  Negotiable monthly retainer aligned to scope and hours
• Success Incentives:
  Optional, milestone-based (e.g., successful regulatory clearance, audit readiness, or major partnership close)
• Equity Options:
  Not offered by default; may be proposed post-fundraise for exceptional performance and ongoing commitment, subject to board approval
• Potential Transition:
  Path to expanded remit (e.g., GC or CPO) after significant fundraising and scale-up

How to Apply

Email your CV and a brief note outlining:

• 2–3 relevant projects (e.g., NDPR/GDPR implementations, DPIAs, healthtech compliance, contracts negotiated)
• Your preferred engagement model and availability
• Your proposed retainer range
• To:
  
• Subject: Legal & Data Protection Advisor – VivaFemini