Privacy by Design Specialist - Data Protection

Wesbank; Johannesburg; On-site; ZAR 550,000 - 850,000; Full time

Job summary

FirstRand is recruiting a Data Privacy Specialist to join the Data Privacy and Protection Centre of Excellence in Johannesburg. The role focuses on strengthening privacy governance, PAIA compliance, and risk management across the organization.

You will drive privacy by design in AI/analytics projects, collaborate with cross-functional teams, and develop training materials and RoPA documentation. A strong background in data privacy and relevant certifications is expected.

Qualifications

• Minimum: LLB, B.Com LLB, or Risk Management, Audit, or related field.
• 4–5 years in Data Privacy Programme Management.
• Working knowledge of PAIA and POPIA and their practical application.
• Exposure to AI privacy issues is advantageous.
• Experience with privacy management platforms (OneTrust, TrustArc, Securiti).

Responsibilities

• Represent the CoE and provide privacy SME in governance and PAIA.
• Support privacy program evolution globally in line with frameworks.
• Draft and harmonise privacy docs, notices and training.
• Identify privacy risks in designs and implement privacy by design.
• Oversee RoPA, DPIAs, and third party risk assessments.
• Coordinate with data owners and product teams to embed PdD.
• Develop privacy dashboards, metrics, and reporting.
• Deliver privacy training and awareness globally.

Skills

Privacy governance

PAIA/POPIA knowledge

Data privacy

Analytics

Education

LLB

B.Com LLB

Risk management

Audit

Tools

OneTrust

TrustArc

Securiti

Job description

FirstRand is recruiting a Data Privacy Specialist to join the Data Privacy and Protection Centre of Excellence in Johannesburg. The role focuses on strengthening privacy governance, PAIA compliance, and risk management across the organization.

You will drive privacy by design in AI/analytics projects, collaborate with cross-functional teams, and develop training materials and RoPA documentation. A strong background in data privacy and relevant certifications is expected.