Regulatory Compliance Analyst

Dimension Data Solutions Limited (Kenya); Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

NTT DATA in Johannesburg seeks a seasoned Regulatory and Data Privacy Compliance professional to independently manage regulatory affairs and data privacy governance. You will oversee obligations, monitor developments, conduct risk assessments, evaluate controls, and support audits to ensure compliance across the business.

Responsibilities include advising on POPIA and GDPR compliance, negotiating data processing agreements, and coordinating privacy audits and data breach responses within a

Qualifications

• Bachelor of Law (LLB) required.
• Privacy certifications such as CIPP/E, CIPP/A, CIPM are advantageous.
• Minimum of 4 years relevant experience in compliance, legal, or regulatory roles.
• Seasoned knowledge of data protection laws and industry regulations.
• Experience in IT/Telecoms compliance, auditing, and documentation.
• Experience in a global matrixed organization preferred.

Responsibilities

• Provide expert advice on regulatory affairs affecting telecommunications and data privacy.
• Monitor regulatory developments and conduct risk assessments.
• Coordinate internal controls and support audits for compliance.
• Serve as liaison with regulatory authorities and stakeholders.
• Review data processing agreements and privacy impact assessments.
• Assist with annual regulatory submissions and licences renewals.
• Maintain records in the risk register and escalate regulatory risks.
• Coordinate with external counsel as required.
• Advise on IP protection, including trademarks, and maintain related schedules.

Skills

Regulatory affairs

Data privacy

Audits

Risk assessment

Stakeholder management

Education

Bachelor of Law (LLB)

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

This role is responsible for independently managing telecommunications regulatory affairs and data privacy compliance across the business. The successful candidate will oversee regulatory compliance obligations, monitor and interpret regulatory developments, conduct risk assessments, evaluate internal controls, and support audits to ensure compliance with applicable laws and industry requirements. They will also serve as a key point of contact for regulatory authorities and stakeholders.

From a data privacy perspective, the role will provide advice on compliance with data protection laws and company policies, support privacy governance initiatives, review and negotiate data processing agreements, conduct privacy impact assessments and data mapping exercises, manage data breaches, coordinate audits, and act as the primary contact for privacy-related queries across the business.

Key responsibilities

• Provide expert advice and day-to-day operational support on regulatory matters impacting the telecommunications industry, including data privacy, competition law, and trademark law.
• Manage day-to-day telecommunications regulatory affairs activities, including regulatory queries, routine regulatory filings, compliance calendars, regulatory submissions, number allocation matters, ISPA queries, and interactions with regulatory authorities.
• Ensure that all necessary regulatory licences, permits, and certifications are processed, maintained, and renewed in a timely manner.
• Engage internal stakeholders and draft regulatory submissions in response to requests from local and regional regulatory authorities.
• Draft internal regulatory opinions as and when requested by internal stakeholders with a view to mitigating regulatory and business risks.
• Assist internal stakeholders with local and, where applicable, regional quarterly and annual regulatory submissions, such as the computation of annual licence fees, number allocation applications, and regulatory compliance reports.
• Maintain stakeholder relationships with various local and regional regulatory authorities and policymakers and advocate for the business's strategic position in alignment with business objectives, including attending to ISPA queries and online takedown notices.
• Monitor legal and regulatory changes to ensure that appropriate interventions are defined and communicated to impacted internal stakeholders.
• Investigate allegations of regulatory non-compliance to ensure that appropriate measures are taken to prevent recurrence.
• Identify, classify, and record regulatory risks in the Risk Register by determining the root causes and ensuring that reported risks are resolved through the proactive implementation of appropriate remedial actions.
• Work with external counsel as and when required.
• Provide expert advice on data privacy in compliance with applicable data privacy laws such as POPIA and the GDPR.
• Ensure that the organization complies with data privacy laws by implementing and maintaining the data privacy governance framework.
• Review, negotiate, and advise on data processing agreements and other privacy-related contractual provisions.
• Review, complete, and advise on data privacy assessments, due diligence assessments, data mapping exercises, and data processing agreements.
• Attend to data breaches and ensure that data breach notifications are submitted timeously to relevant regulators and other impacted stakeholders, where required.
• Serve as the point of contact for data privacy queries, including coordinating and conducting data privacy audits.
• Advise the business on all aspects of intellectual property, including trademark protection, brand protection, and enforcement activities.
• Brief external attorneys to ensure the timely renewal of trademarks before their expiry.
• Maintain the business's trademark schedule.
• Attend to global trademark monitoring alerts and recommend appropriate actions to protect the organization's intellectual property rights.
• Attend to global trademark monitoring alerts.

Academic qualifications and certifications

Bachelor of Law (LLB)

Relevant privacy certifications include CIPP/E, CIPP/A, CIPM or an equivalent recognised data protection/privacy certification is advantageous

Required experience

Minimum of 4 years relevant experience.

Seasoned knowledge of relevant laws and regulations, including data protection laws, and industry-specific regulations.

Seasoned experience in compliance, legal, or regulatory roles within the IT / Telecoms industry

Seasoned experience with compliance auditing, reporting, and documentation.

Seasoned experience working within a global matrixed organization, preferab