Remote Legal Counsel - Data Privacy & Cybersecurity

Placements24; Gauteng; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Stock options

Retirement plan

Professional development budget

Flexible hours

Home office stipend

Bonuses

Global network

Job summary

Placements24 seeks a Remote Legal Counsel specializing in data privacy and cybersecurity to support a global tech client. You will develop privacy strategies, conduct DPIAs, and manage data breach responses in a remote-first environment.

Collaborate with engineering, product, and security teams across time zones to embed privacy by design, advise on cross-border transfers, and train staff on privacy and security best practices.

Qualifications

• Admitted attorney with 6+ years in data privacy, cybersecurity, and technology law.
• Proven expertise in POPIA, GDPR, and US privacy laws (CCPA) is preferred.
• Experience building privacy programs and handling data breaches is required.
• Strong written and verbal communication; able to explain complex concepts to technical teams.

Responsibilities

• Develop, implement, and maintain global data privacy policies and notices.
• Advise on compliance with POPIA, GDPR, CCPA, and related privacy regulations.
• Conduct DPIAs/PIAs for new products and initiatives; assess privacy risks.
• Manage DSARs and other data privacy rights requests.
• Develop and execute incident response plans for data breaches and cybersecurity incidents.
• Negotiate DPAs and other data-related contracts with vendors; manage cross-functional collaboration.
• Stay current on evolving privacy and cybersecurity laws and provide training to staff.

Skills

Data Privacy

Cybersecurity

Technology Law

Negotiation

Policy Development

Job description

About the Role

Our client, a cutting-edge technology company, is seeking a dedicated Remote Legal Counsel specializing in Data Privacy and Cybersecurity to bolster their global legal team. This is a fully remote position, offering a unique opportunity for a motivated legal professional to work from anywhere. You will be instrumental in developing and implementing comprehensive data privacy strategies and ensuring the company’s robust cybersecurity posture aligns with global legal and regulatory requirements, including POPIA, GDPR, and CCPA. The role involves advising on data protection impact assessments, managing data breach responses, and negotiating data processing agreements. The ideal candidate is proactive, deeply knowledgeable about data privacy laws, and thrives in a dynamic, remote-first environment. You will collaborate closely with engineering, product, and security teams to embed privacy and security by design.

Key Responsibilities

• Develop, implement, and maintain the company's global data privacy policies, procedures, and notices.
• Advise on compliance with data protection laws such as POPIA, GDPR, CCPA, and other relevant privacy regulations.
• Conduct Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs) for new products, services, and initiatives.
• Manage and respond to data subject access requests (DSARs) and other data privacy rights requests.
• Develop and execute incident response plans for data breaches and cybersecurity incidents.
• Provide legal guidance on cybersecurity best practices and risk mitigation strategies.
• Negotiate data processing agreements (DPAs) and other data-related contractual clauses with third-party vendors.
• Collaborate with internal teams (engineering, product, security, marketing) to ensure privacy and security are integrated into all aspects of the business.
• Stay abreast of evolving global data privacy and cybersecurity laws and regulations.
• Conduct privacy and cybersecurity training for employees.
• Advise on cross-border data transfers and international privacy compliance.

Requirements

• Admitted attorney with a minimum of 6 years of experience focused on data privacy, cybersecurity, and technology law, preferably gained in a technology company or a leading law firm.
• Demonstrated expertise in South African POPIA, EU GDPR, and US data privacy laws (e.g., CCPA).
• Experience in developing and implementing privacy programs and handling data breaches.
• Strong understanding of cybersecurity principles and technologies.
• Excellent negotiation, analytical, and problem-solving skills.
• Exceptional written and verbal communication skills, capable of explaining complex legal concepts to technical and non-technical audiences.
• Proven ability to work autonomously and manage workload effectively in a remote setting.
• CIPP/E, CIPP/US, or similar privacy certifications are a strong asset.
• Experience advising on AI, cloud computing, and emerging technologies is highly desirable.
• Ability to work collaboratively across different time zones and cultures.

Benefits

• Highly competitive remote salary.
• Comprehensive health, dental, and vision insurance.
• Generous stock options or equity grants.
• Contribution to a retirement savings plan.
• Substantial budget for professional development, including conferences and certifications.
• Flexible working hours and the ability to work from anywhere accessible to the company.
• Opportunity to shape the privacy and security legal framework of a leading tech firm.
• Performance-based bonuses.
• Home office setup stipend.
• Access to a global network of colleagues and industry experts.