Regulatory Compliance Analyst

NTT Ltd.; Johannesburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Hybrid Working

Job summary

NTT DATA is seeking a regulatory affairs and data privacy professional in a hybrid role based in Johannesburg. You will independently manage telecommunications regulatory matters and data privacy compliance, oversee risk assessments, internal controls, and audits, and act as the primary liaison with regulators and stakeholders.

The role requires a law degree (LLB) and privacy certifications (CIPP/E, CIPP/A, CIPM) or equivalent, with at least 4 years in regulatory/legal/compliance roles within

Qualifications

• Bachelor of Law (LLB) required.
• Relevant privacy certifications (CIPP/E, CIPP/A, CIPM) or equivalent are advantageous.
• Seasoned knowledge of data protection laws and industry regulations.

Responsibilities

• Provide expert advice on regulatory matters impacting telecom and data privacy.
• Manage day-to-day regulatory affairs activities including filings, licences, and compliance calendars.
• Draft regulatory submissions and internal opinions to mitigate risk.
• Coordinate privacy governance initiatives, data mapping, DPIAs, and breach notifications.
• Review and negotiate data processing agreements and privacy provisions.
• Serve as main contact for privacy queries and coordinate audits across the business.

Skills

Regulatory affairs

Data privacy

Risk assessment

Stakeholder management

Audit support

Education

LLB

Job description

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

This role is responsible for independently managing telecommunications regulatory affairs and data privacy compliance across the business. The successful candidate will oversee regulatory compliance obligations, monitor and interpret regulatory developments, conduct risk assessments, evaluate internal controls, and support audits to ensure compliance with applicable laws and industry requirements. They will also serve as a key point of contact for regulatory authorities and stakeholders.

From a data privacy perspective, the role will provide advice on compliance with data protection laws and company policies, support privacy governance initiatives, review and negotiate data processing agreements, conduct privacy impact assessments and data mapping exercises, manage data breaches, coordinate audits, and act as the primary contact for privacy-related queries across the business.

Key responsibilities:

• Provide expert advice and day-to-day operational support on regulatory matters impacting the telecommunications industry, including data privacy, competition law, and trademark law.
• Manage day-to-day telecommunications regulatory affairs activities,
  including regulatory queries, routine regulatory filings, compliance
  calendars, regulatory submissions, number allocation matters, ISPA
  queries, and interactions with regulatory authorities.
• Ensure that all necessary regulatory licences, permits, and certifications are processed, maintained, and renewed in a timely manner.
• Engage internal stakeholders and draft regulatory submissions in response to requests from local and regional regulatory authorities.
• Draft internal regulatory opinions as and when requested by internal
  stakeholders with a view to mitigating regulatory and business risks.
• Assist internal stakeholders with local and, where applicable, regional
  quarterly and annual regulatory submissions, such as the computation of annual licence fees, number allocation applications, and regulatory compliance reports.
• Maintain stakeholder relationships with various local and regional
  regulatory authorities and policymakers and advocate for the business’s strategic position in alignment with business objectives, including attending to ISPA queries and online takedown notices.
• Monitor legal and regulatory changes to ensure that appropriate
  interventions are defined and communicated to impacted internal
  stakeholders.
• Investigate allegations of regulatory non-compliance to ensure that
  appropriate measures are taken to prevent recurrence.
• Identify, classify, and record regulatory risks in the Risk Register by
  determining the root causes and ensuring that reported risks are resolved through the proactive implementation of appropriate remedial actions.
• Work with external counsel as and when required.
• Provide expert advice on data privacy in compliance with applicable data privacy laws such as POPIA and the GDPR.
• Ensure that the organization complies with data privacy laws by
  implementing and maintaining the data privacy governance framework.
• Review, negotiate, and advise on data processing agreements and other privacy-related contractual provisions.
• Review, complete, and advise on data privacy assessments, due diligence assessments, data mapping exercises, and data processing agreements.
• Attend to data breaches and ensure that data breach notifications are
  submitted timeously to relevant regulators and other impacted
  stakeholders, where required.
• Serve as the point of contact for data privacy queries, including
  coordinating and conducting data privacy audits.
• Advise the business on all aspects of intellectual property, including
  trademark protection, brand protection, and enforcement activities.
• Brief external attorneys to ensure the timely renewal of trademarks before their expiry.
• Maintain the business’ trademark schedule.
• Attend to global trademark monitoring alerts and recommend appropriate actions to protect the organization’s intellectual property rights.
• Attend to global trademark monitoring alerts.

Academic qualifications and certifications:

• Bachelor of Law (LLB)
• Relevant privacy certifications include CIPP/E, CIPP/A, CIPM or an equivalent recognised data protection/privacy certification is advantageous

Required experience:

• Minimum of 4 years relevant experience.
• Seasoned knowledge of relevant laws and regulations, including data protection laws, and industry-specific regulations.
• Seasoned experience in compliance, legal, or regulatory roles within the IT / Telecoms industry
• Seasoned experience with compliance auditing, reporting, and documentation.
• Seasoned experience working within a global matrixed organization, preferably within the IT services industry.

Workplace type:

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.