Remote POPIA & Security Governance Associate

Zohorecruit; Sandton; Remote; ZAR 443,000 - 664,000; Full time

Job summary

Centrax Digital is an AI-first consulting and digital engineering firm based in Sandton. This Security, Governance and POPIA Specialist (Associate) role focuses on ensuring AI solutions are secure, well governed and POPIA-compliant from the start, working within CAIF-5 governance frameworks.

You baseline client controls, assess risks from AI tools and integrations, and draft acceptable-use principles and governance models, with remote work and occasional client workshops as required.

Qualifications

• 8+ years in information security, privacy or IT risk with 3+ years POPIA work in SA
• Privacy impact assessments carried out and controls designed as a result
• Security or audit certifications preferred (CISSP, CISM, CISA, ISO/IEC 27001)

Responsibilities

• Baseline current security, privacy and AI usage controls, including third-party AI tools in use
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements
• Carry out privacy and AI risk assessments for proposed solutions and pilots
• Design permission, approval and audit models for AI agents
• Draft AI acceptable-use principles and model and tool governance
• Assess AI-specific threats such as prompt injection and data leakage
• Review AI vendor terms for data use, retention, residency and security

Skills

Security governance

Privacy compliance

Information security

Risk assessment

Education

Bachelor's degree in Information Systems, Computer Science or Law

Job description

Centrax Digital is an AI-first consulting and digital engineering firm based in Sandton. This Security, Governance and POPIA Specialist (Associate) role focuses on ensuring AI solutions are secure, well governed and POPIA-compliant from the start, working within CAIF-5 governance frameworks.

You baseline client controls, assess risks from AI tools and integrations, and draft acceptable-use principles and governance models, with remote work and occasional client workshops as required.