REQUIREMENTS
Affirmative Action South African Citizen
LLB (Bachelor of Laws) or equivalent
Admitted Attorney in South Africa
3+ years of post-admission experience
ESSENTIAL SKILLS
Working knowledge of privacy law
CIPP/ E, CIPP/ US or similar (preferred)
Experience drafting policies and procedures (preferred)
Strong commercial understanding and excellent interpersonal skills
Must be experienced in using SharePoint, and MS Office (Excel/ Word/ Powerpoint, etc.)
Knowledge of cross-over between legal, IT and data security requirements
RESPONSIBILITIES
Collaborate with the business to navigate evolving privacy standards and support the Chief Data Protection Officer in implementing the Data Protection Compliance Management System in the group which includes South Africa and its African subsidiaries
Contact point for and coordinate privacy leads in the group's African entities regarding privacy implementation
Be a privacy subject matter expert and advise the regional African entities on privacy and data protection matters for the day-to-day business including the development of new products, services and initiatives
Attend to data requests by data subjects and third parties in terms of the Promotion of Access to Information Act (PAIA)
Prepare and deliver training to the group's African entities about their obligations under the local regulatory requirements, the company policy OD 2 and any other applicable EU data protection laws which may have an impact on the group's operational activities on the African continent
Support contract negotiations and advise on data processing agreements and data privacy impact assessments
Support data protection/ privacy office responsibilities for privacy by the design of business strategy as well as the implementation of necessary technical organizational measures (TOMs)
Conduct gap analysis and develop solutions with the business to remediate any gaps
Draft and advise on data protection-related documentation: privacy notices, policies and procedures and data subject access requests
Exercise judgement and ability to manage competing deadlines
Collaborate with Legal Services to identify privacy-related legal issues with potential cross-functional impact
Ensure privacy by design processes are embedded into the business
Liaise, partner and act as a contact point for data protection regulatory bodies on matters relating to the processing of personal data and other matters
Partner with the Chief Information Security Officer and the business to investigate and manage potential breaches/ instances of non-compliance to support prompt and accurate reporting
Keep abreast of respective (both local and international) regulatory legal developments, trends and guidelines in data and privacy risk
Analyze proposed and (newly) enacted laws, and regulations and guide their impact on the company's existing processes, as it relates to data and privacy risk
Partner with Group Data Protection in the group, to enable a constant exchange of ideas, developments and trends in all matters regarding data protection and privacy compliance