Remote AI Security, Privacy & POPIA Governance Specialist

Centrax Group; Sandton; Remote; ZAR 221,000 - 461,000; Part time

Job summary

Centrax Digital is seeking an Associate to baseline client security controls, assess AI usage and POPIA risk, and recommend practical governance measures tailored to the client's size and risk, working within CAIF-5 governance.

You will conduct privacy and AI risk assessments, design permission and audit models for AI agents, draft AI acceptable-use principles, and review vendor terms for data use, retention and security in remote engagements.

Qualifications

• Bachelor's degree or higher in Information Systems, Computer Science, Law or related field.
• Minimum 8 years' experience in information security, privacy or IT risk, including 3+ years of POPIA compliance work in South Africa.
• Privacy impact assessments carried out and controls designed as a result.
• A privacy certification (CIPP/E, CIPM or POPIA-specific) and a security or audit certification (CISSP, CISM, CISA or ISO/IEC 27001) are preferred.
• ISO/IEC 42001 is an advantage.

Responsibilities

• Baseline current security and privacy controls, including third-party AI tools in use.
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements.
• Carry out privacy and AI risk assessments for proposed solutions and pilots.
• Design permission, approval and audit models for AI agents.
• Draft AI acceptable-use principles and model and tool governance.
• Assess AI-specific threats such as prompt injection and data leakage.
• Review AI vendor terms for data use, retention, residency and security.

Skills

POPIA compliance

Education

Bachelor's degree in Information Systems, Computer Science, or Law

Job description

Centrax Digital is seeking an Associate to baseline client security controls, assess AI usage and POPIA risk, and recommend practical governance measures tailored to the client's size and risk, working within CAIF-5 governance.

You will conduct privacy and AI risk assessments, design permission and audit models for AI agents, draft AI acceptable-use principles, and review vendor terms for data use, retention and security in remote engagements.