Data Governance & Privacy Lead

Old Mutual South Africa; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Old Mutual South Africa, Johannesburg, invites a Data Governance and Privacy Manager to lead independent 2nd line oversight of data governance, data risk, data quality and privacy compliance across OMI. The role challenges 1st line teams to meet SA regulatory mandates, including POPIA, while treating data as a strategic asset.

You will establish frameworks, monitor DPIAs, data risk indicators, and control effectiveness, and ensure data incidents are investigated and remediated.

Responsibilities

• Data Risk Framework and Appetite: Develop, maintain and embed the Data Risk Management Framework, policy and standards, aligned to the Old Mutual Group enterprise risk framework.
• Define the data risk taxonomy (data quality, data privacy, data lineage, retention, data access, AI/model data, third-party data).
• Propose data risk appetite statements, KRIs and tolerance thresholds for approval by risk committees.
• Provide independent oversight of data governance policies, standards, procedures and control frameworks.
• Ensure data risks are integrated into enterprise risk registers, technology risk assessments and business risk management processes.
• Maintain a forward-looking view of emerging data risks from strategy, digital transformation, acquisitions and new data use cases.
• Independent Data Risk Oversight and Challenge: Conduct independent reviews and risk assessments of material data processes, systems, third-party data sharing and change programmes.
• Review and challenge first-line RCSAs for data-related risks across underwriting, claims, finance, actuarial and IT.
• Oversee DPIAs for new initiatives, products and technology implementations.
• Evaluate design and operating effectiveness of data controls.
• Identify systemic weaknesses and risk concentrations across units, applications, data domains and third parties.
• Review material data incidents and breaches to assess root causes and remediation.
• Track data risk events and breaches through remediation actions.
• Data Governance and Data Quality Oversight: Assess controls to ensure data is accurate, complete, consistent, valid, timely, unique and fit for purpose.
• Oversee risk management practices supporting data lineage, traceability, reconciliation and data transformation across source systems, platforms, data warehouses and reporting environments.

Job description

Old Mutual South Africa, Johannesburg, invites a Data Governance and Privacy Manager to lead independent 2nd line oversight of data governance, data risk, data quality and privacy compliance across OMI. The role challenges 1st line teams to meet SA regulatory mandates, including POPIA, while treating data as a strategic asset.

You will establish frameworks, monitor DPIAs, data risk indicators, and control effectiveness, and ensure data incidents are investigated and remediated.