Information Security Officer - Data Privacy

Placements24; Sandton; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund contributions

Performance bonuses

Professional development

Job summary

Placements24 is seeking an Information Security Officer in Sandton to lead data privacy programs, ensuring POPIA compliance. This on-site role collaborates with legal, compliance and IT teams to protect data across the organization.

You will develop privacy policies, conduct DPIAs, manage DSARs, train staff, and respond to data breaches while staying current with evolving privacy laws.

Qualifications

• 6+ years in information security, risk management, or legal/compliance focused on privacy.
• Strong knowledge of POPIA; GDPR understanding beneficial.
• Experience developing and implementing privacy programs and policies.
• Excellent analytical and communication skills.
• On-site in Sandton.

Responsibilities

• Develop, implement, and maintain data privacy policies and procedures in line with POPIA and other regulations.
• Conduct Data Protection Impact Assessments (DPIAs) for new projects and systems.
• Monitor and manage the organization's compliance with data privacy requirements.
• Serve as the primary point of contact for data privacy inquiries from employees, regulators, and customers.
• Manage the process for handling data subject access requests (DSARs).
• Develop and deliver data privacy training and awareness programs.
• Investigate and manage data breaches, including reporting to regulatory authorities as required.
• Collaborate with IT and security teams to ensure data protection throughout its lifecycle.
• Stay updated on evolving data privacy laws, regulations, and best practices.
• Advise business units on privacy risks and mitigation strategies.

Skills

Data privacy

Information security

Risk management

Policy development

Data breach response

Education

Bachelor's degree in Law/IT

Master's degree or relevant certifications (CIPP/E/CIPM/CIPT/CISSP)

Job description

About the Role

Our client, a leading investment banking firm located in the financial hub of Sandton , Gauteng, is looking for a dedicated Information Security Officer with a specialization in Data Privacy. This crucial role will ensure the organization complies with all relevant data protection regulations, including POPIA. You will be responsible for developing and implementing data privacy policies, conducting privacy impact assessments, and managing data breach notifications. The ideal candidate will possess a strong understanding of data privacy laws, risk management, and information security principles. This position requires an on-site presence in Sandton to facilitate close collaboration with legal, compliance, and IT departments. Join a sophisticated team committed to upholding the highest standards of data security and privacy in the financial sector.

Key Responsibilities

• Develop, implement, and maintain comprehensive data privacy policies and procedures in line with POPIA and other relevant regulations.
• Conduct Data Protection Impact Assessments (DPIAs) for new projects and systems.
• Monitor and manage the organization's compliance with data privacy requirements.
• Serve as the primary point of contact for data privacy inquiries from employees, regulators, and customers.
• Manage the process for handling data subject access requests (DSARs).
• Develop and deliver data privacy training and awareness programs to employees.
• Investigate and manage data breaches, including reporting to regulatory authorities as required.
• Collaborate with IT and security teams to ensure data is protected throughout its lifecycle.
• Stay updated on evolving data privacy laws, regulations, and best practices.
• Advise business units on privacy risks and mitigation strategies.

Requirements

• Bachelor's degree in Law, Information Security, IT, or a related field; a Master's degree or relevant certifications (e.g., CIPP/E, CIPM, CIPT, CISSP) are highly advantageous.
• Minimum of 6 years of experience in information security, risk management, or legal/compliance, with a strong focus on data privacy.
• In-depth knowledge of POPIA and other relevant data protection legislation (e.g., GDPR understanding is beneficial).
• Proven experience in developing and implementing privacy programs and policies.
• Strong understanding of information security principles and technologies.
• Excellent analytical, problem-solving, and communication skills.
• Experience in conducting privacy impact assessments and managing data breach responses.
• Ability to work independently and collaboratively with cross-functional teams.
• Strong organizational and project management skills.
• Must be able to work on-site in Sandton.

Benefits

• Our client offers a competitive salary, excellent medical aid, retirement fund contributions, performance bonuses, and opportunities for continuous professional development.
• This role provides the chance to make a significant impact on data privacy and security within a leading financial institution located in the heart of Sandton , contributing to a culture of trust and compliance.