Lead Data Protection Officer

Placements24; Cape Town; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

Placements24 seeks a highly experienced Lead Data Protection Officer to establish and lead the data privacy function for a fully remote role across South Africa. The DPO will oversee data protection strategy, ensure POPIA and GDPR compliance, and serve as the primary contact for data protection authorities.

The role requires a law degree with specialization in data protection, 8+ years in data protection or compliance, and strong risk management and IT security knowledge.

Qualifications

• POPIA, GDPR knowledge required.
• 8+ years of experience in data protection, privacy, or compliance roles.
• CIPP/E or equivalent certification is highly desirable.
• Experience in managing cross-functional teams and projects remotely.

Responsibilities

• Develop, implement, and manage the company's comprehensive data protection program, ensuring compliance with POPIA and other applicable privacy laws.
• Act as the primary point of contact for data protection authorities, responding to inquiries and managing investigations.
• Conduct Data Protection Impact Assessments (DPIAs) and Privacy by Design reviews for new projects and initiatives.
• Develop and deliver data privacy training and awareness programs for all employees.
• Monitor compliance with data protection policies and procedures, and advise on corrective actions as needed.
• Manage data subject access requests (DSARs) and other rights requests.
• Advise senior management and business units on data privacy risks and best practices.
• Stay abreast of evolving data privacy laws and regulations and update the company's policies and procedures accordingly.
• Collaborate with IT, security, legal, and business teams to ensure data privacy is embedded into all aspects of the organization's operations.

Education

Law degree or equivalent qualification (specialization in data protection or privacy law)

Job description

About the Role

Our client is seeking a highly motivated and experienced Lead Data Protection Officer (DPO) to establish and lead their data privacy function. This is a fully remote role, offering the flexibility to work from anywhere within South Africa. The DPO will be responsible for overseeing the company's data protection strategy and implementation, ensuring compliance with POPIA and other relevant global data privacy regulations. You will be the primary point of contact for data protection authorities and will play a crucial role in advising the business on all data privacy-related matters. This position requires a deep understanding of data privacy laws, risk management, and IT security principles. The ideal candidate will have a proven track record of successfully implementing data protection programs in complex organizational structures. Join a forward-thinking organization committed to upholding the highest standards of data privacy and security.

Key Responsibilities

• Develop, implement, and manage the company's comprehensive data protection program, ensuring compliance with POPIA and other applicable privacy laws.
• Act as the primary point of contact for data protection authorities, responding to inquiries and managing investigations.
• Conduct Data Protection Impact Assessments (DPIAs) and Privacy by Design reviews for new projects and initiatives.
• Develop and deliver data privacy training and awareness programs for all employees.
• Monitor compliance with data protection policies and procedures, and advise on corrective actions as needed.
• Manage data subject access requests (DSARs) and other rights requests.
• Advise senior management and business units on data privacy risks and best practices.
• Stay abreast of evolving data privacy laws and regulations and update the company's policies and procedures accordingly.
• Collaborate with IT, security, legal, and business teams to ensure data privacy is embedded into all aspects of the organization's operations.

Requirements

• Law degree or equivalent qualification, with a specialization in data protection or privacy law.
• Minimum of 8 years of experience in data protection, privacy, or compliance roles.
• In-depth knowledge of POPIA, GDPR, and other international data privacy regulations.
• Proven experience in developing and implementing data protection frameworks and policies.
• Strong understanding of information security principles and technologies.
• Excellent communication, interpersonal, and stakeholder management skills.
• Ability to interpret complex legal texts and translate them into practical business advice.
• CIPP/E or equivalent certification is highly desirable.
• Experience in managing cross-functional teams and projects remotely.

Benefits

• As a fully remote position, this role offers unparalleled flexibility and the ability to work from any approved location.
• Our client provides a highly competitive salary package, including performance bonuses and potential equity options.
• Comprehensive medical aid and a generous provident fund contribution are included.
• Continuous professional development is supported through access to industry-leading training, certifications, and conferences.
• Employees benefit from a supportive and collaborative remote work culture, with regular virtual team-building activities and opportunities for career advancement within a growing international organization.