Commercial Attorney – Data Privacy Compliance

Morae; Cape Town; On-site; ZAR 1,000,000 - 1,500,000; Full time

Job summary

Morae Global is seeking an experienced Commercial Attorney with strong Data Privacy compliance expertise to support global clients with privacy risk, compliance, and contractual matters.

This senior role focuses on PIAs/DPIAs, DPAs, cross-border transfers, and privacy controls, working with legal, IT, security and product teams. Knowledge of GDPR, UK-GDPR and CCPA/CPRA is essential; IAPP certification is advantageous. Cape Town-based role.

Qualifications

• 3+ years' post-qualification experience with commercial/transactional docs and data privacy compliance.
• Hands-on experience conducting PIAs/DPIAs and privacy risk assessments.
• Experience reviewing and negotiating DPAs and privacy-related contractual provisions.
• Knowledge of global data privacy regulations.
• IAPP CIPP/CIPM certification is advantageous.
• Experience with OneTrust is advantageous.

Responsibilities

• Lead end-to-end PIAs/DPIAs, map data flows and assess risks.
• Review, draft and negotiate DPAs and data protection clauses.
• Assess risks of sub-processing, data security, breach notification, retention, deletion, audits and cross-border transfers.
• Collaborate with legal, business, IT, security and product teams to implement privacy controls.
• Manage privacy assessments and documentation through OneTrust.
• Apply GDPR, UK-GDPR and CCPA/CPRA across jurisdictions.

Skills

PIAs/DPIAs

DPAs

Global privacy regulations

OneTrust

IAPP CIPP/CIPM

Education

Law degree or related qualification in Law/Info Security/Data Privacy

Tools

OneTrust

Job description

Commercial Attorney - Data Privacy Compliance

Location: Cape Town

Job Type: Full-Time

Level: Senior Associate

About the Role

Morae Global is looking for an experienced Commercial Attorney with strong Data Privacy Compliance expertise to support global clients with privacy risk, compliance, and contractual matters.

This role is ideal for a legal professional who has hands-on experience conducting Privacy Impact Assessments (PIAs/DPIAs) and reviewing and negotiating Data Processing Agreements (DPAs), and who can independently manage privacy assessments across different jurisdictions and business environments.

Key Responsibilities

• Lead end-to-end PIAs/DPIAs, including identifying data flows, assessing privacy risks, and recommending mitigation measures.
• Review, draft and negotiate DPAs and data protection clauses in customer and vendor agreements.
• Assess risks relating to sub-processing, data security, breach notification, retention, deletion, audits and cross-border data transfers.
• Work with legal, business, IT, security and product teams to gather information and implement privacy controls.
• Manage privacy assessments and documentation through OneTrust.
• Apply global privacy regulations, including GDPR, UK-GDPR and CCPA/CPRA.

What We're Looking For

• 3+ years' post-qualification experience, with strong exposure to commercial/transactional documentation and data privacy compliance.
• Proven hands-on experience conducting PIAs/DPIAs and privacy risk assessments.
• Strong experience reviewing and negotiating DPAs and privacy-related contractual provisions.
• Knowledge of global data privacy regulations.
• Ability to work independently, manage multiple stakeholders and confidently identify and mitigate privacy risk.
• Law degree or relevant qualification in Law, Information Security, Data Privacy or a related field.
• IAPP CIPP/CIPM certification is advantageous.
• Experience with OneTrust is advantageous.

Employment Equity:

Morae is committed to Employment Equity and transformation. Candidates from designated groups are encouraged to apply in line with our EE objectives.

A Few Final Notes:

• Please do not send direct messages.
• Applicants must be based in Cape Town and meet the role requirements.
• Morae Global Corporation does not engage recruitment agencies.

Privacy Policy: https://www.morae.com/privacy-policy