Data Privacy & Protection Specialist – Global CoE Expert

RMB Nigeria Limited; Johannesburg; On-site; ZAR 556,000 - 666,000; Full time

Job summary

FirstRand is seeking a Data Privacy Specialist (SME) to join the Data Privacy and Protection Centre of Excellence in Johannesburg. The role focuses on governance, PAIA/POPIA compliance, and embedding privacy-by-design across AI, analytics, and emerging technologies.

You will draft and harmonise privacy documentation, manage RoPA, DPIAs, and third-party assessments, and lead privacy training to ensure global regulatory alignment.

Qualifications

• Minimum: LLB, B.Com LLB, or Risk Management, Audit, or related field.
• Experience: 4–5 years in Data Privacy Programme Management or related fields.
• Working knowledge of PAIA and POPIA and practical application to access requests.
• Experience with data privacy laws, PAIA, compliance frameworks, and IT risk governance.

Responsibilities

• Represent the CoE and provide subject matter expertise in privacy across governance, PAIA, and privacy risk.
• Draft, review, maintain, and harmonise privacy documentation and training materials.
• Identify privacy risks in technical designs and contribute to privacy-enhancing features.
• Oversee privacy management platforms, RoPA, DPIAs, and incident management.
• Coordinate privacy training and awareness globally, ensuring local regulatory alignment.
• Support automation of privacy operations to scale compliance across the organisation.

Skills

Data privacy

Privacy governance

Regulatory compliance

AI ethics awareness

Analytical skills

Education

LLB or related field

B.Com LLB or Risk Management

Tools

OneTrust

TrustArc

Securiti

Job description

FirstRand is seeking a Data Privacy Specialist (SME) to join the Data Privacy and Protection Centre of Excellence in Johannesburg. The role focuses on governance, PAIA/POPIA compliance, and embedding privacy-by-design across AI, analytics, and emerging technologies.

You will draft and harmonise privacy documentation, manage RoPA, DPIAs, and third-party assessments, and lead privacy training to ensure global regulatory alignment.