About the Role Our client, a forward-thinking technology company with a global presence, is seeking a highly experienced Senior Data Privacy Lawyer to join their legal team on a fully remote basis. This pivotal role will focus on advising the business on all aspects of data privacy law, including POPIA, GDPR, and other relevant global regulations. The ideal candidate will possess a deep understanding of data protection principles, cybersecurity implications, and the ability to translate complex legal requirements into practical business solutions. This is an exceptional opportunity to shape data privacy policies and practices for a rapidly evolving organization, working entirely from your location. We are looking for a proactive, self-motivated legal professional with a strong analytical acumen and a passion for privacy advocacy. This remote-first position demands excellent communication and collaboration skills to effectively engage with teams across different time zones.
Key Responsibilities
- Provide expert legal advice on data privacy compliance across all jurisdictions where the company operates.
- Develop, implement, and maintain data privacy policies, procedures, and documentation (e.g., Privacy Notices, Data Processing Agreements).
- Conduct Data Protection Impact Assessments (DPIAs) and advise on risk mitigation strategies.
- Manage data breach incident response plans and investigations.
- Advise on data subject rights requests and ensure timely and compliant responses.
- Collaborate with IT, Security, and Product teams to ensure privacy-by-design principles are embedded in new products and services.
- Stay current with evolving global data privacy laws and regulations, providing proactive guidance.
- Train employees on data privacy best practices and compliance requirements.
- Review and advise on data transfer mechanisms and international data arrangements.
- Represent the company in interactions with data protection authorities as needed.
Requirements
- Admitted attorney or advocate with an LLB and a strong academic record.
- Minimum of 6 years of experience specializing in data privacy and data protection law.
- In-depth knowledge of South Africa's Protection of Personal Information Act (POPIA) and the EU's General Data Protection Regulation (GDPR).
- Experience with other international privacy frameworks is highly desirable.
- Proven ability to draft clear and concise privacy policies and contractual clauses.
- Excellent analytical, problem-solving, and strategic thinking skills.
- Exceptional written and verbal communication skills, with the ability to explain complex legal concepts to non-legal audiences.
- Demonstrated ability to work independently, manage a demanding workload, and meet deadlines in a remote setting.
- Proficiency in using collaboration tools and legal tech platforms.
- Professional certifications such as CIPP/E, CIPP/US, or CIPM are a plus.
Benefits
- Fully remote work arrangement, offering flexibility and work-life balance.
- Competitive salary and performance-based bonuses.
- Opportunity to lead privacy initiatives in a cutting-edge technology company.
- Comprehensive health and wellness benefits.
- Professional development and continuous learning opportunities.