Remote Senior Data Protection Counsel

Placements24; Bloemfontein; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Bonus opportunity

Medical aid

Retirement savings plan

Generous annual leave

Professional development budget

Fully remote work

Job summary

Placements24 is seeking a Senior Data Protection Counsel for a fully remote role to support South Africa operations, focusing on POPIA and GDPR compliance.

You will advise on data processing agreements, privacy policies, DPIAs, and breach responses, collaborating with IT, security, and product teams to embed privacy-by-design.

The role requires at least 7 years of legal experience, SA admission, and strong privacy certifications; offers competitive compensation and remote flexibility.

Qualifications

• LLB or equivalent legal qualification.
• Admitted as an Attorney or Advocate in South Africa.
• Minimum 7 years legal experience, 4+ in data privacy.
• Deep knowledge of POPIA and GDPR.
• Experience drafting DPAs and privacy policies.
• Privacy impact assessments and data breach management experience.
• Certifications like CIPP/E, CIPM are a strong asset.

Responsibilities

• Provide expert legal counsel on data privacy laws, POPIA and GDPR.
• Develop, review and update privacy policies and DPAs.
• Advise on data processing, collection, storage and transfer requirements.
• Manage data subject access requests and privacy rights.
• Lead data breach response and notification obligations.
• Conduct DPIAs and advise on risk mitigation strategies.
• Deliver data privacy training for employees.
• Collaborate with IT and security on privacy-by-design principles.
• Stay updated on evolving privacy laws and guidance globally.
• Advise on vendor management and DPAs.

Skills

Data privacy expertise

Advisory to senior management

Communication skills

Education

LLB or equivalent

Admitted SA Attorney/Advocate

Tools

DPIA frameworks

Job description

About the Role

Our client, a leading global technology services provider, is actively seeking a highly experienced Senior Data Protection Counsel to join their expanding legal team. This is a fully remote position, offering the flexibility to work from anywhere within South Africa, with a primary focus on supporting operations and ensuring compliance within the South African context, particularly regarding POPIA. The successful candidate will be responsible for providing expert legal advice on all data privacy and protection matters, including data processing agreements, privacy policies, data breach responses, and compliance programs. You will play a critical role in safeguarding sensitive information and mitigating legal and reputational risks associated with data handling. This position requires a deep understanding of data privacy laws, including POPIA and GDPR, and the ability to translate complex legal requirements into practical business solutions. You will collaborate with various departments, including IT, security, marketing, and product development, to embed privacy-by-design principles. This is an exceptional opportunity for a privacy law specialist to take on a senior role in a forward-thinking organization, operating in a fully remote capacity.

Key Responsibilities

• Provide expert legal counsel on data privacy and protection laws, with a focus on POPIA and GDPR.
• Develop, review, and update privacy policies, procedures, and data processing agreements.
• Advise on the legal requirements for data processing, collection, storage, and transfer.
• Manage and respond to data subject access requests and other privacy rights.
• Lead the legal response to data breaches, including notification obligations.
• Conduct Data Protection Impact Assessments (DPIAs) and advise on risk mitigation strategies.
• Develop and deliver data privacy training programs for employees.
• Collaborate with IT and security teams to ensure compliance with privacy-by-design and by-default principles.
• Stay abreast of evolving data privacy laws and regulatory guidance globally.
• Advise on vendor management with respect to data processing arrangements.

Requirements

• A Bachelor of Laws (LLB) degree or equivalent legal qualification.
• Admitted as an Attorney or Advocate of the High Court of South Africa.
• A minimum of 7 years of legal experience, with at least 4 years specifically focused on data privacy and protection law.
• In-depth knowledge of the Protection of Personal Information Act (POPIA) and General Data Protection Regulation (GDPR).
• Experience in drafting and negotiating data processing agreements and privacy policies.
• Proven ability to conduct privacy impact assessments and manage data breach responses.
• Excellent analytical, problem-solving, and communication skills.
• Strong project management and organizational skills, essential for remote work.
• Ability to work independently and proactively in a remote setting.
• Professional certifications such as CIPP/E, CIPP/US, or CIPM are a strong asset.

Benefits

• Highly competitive salary, commensurate with experience and expertise.
• Significant bonus opportunity.
• Comprehensive medical aid and retirement savings plan.
• Generous annual leave and personal days.
• Professional development budget and support for certifications.
• The flexibility and autonomy of a fully remote working arrangement.
• Opportunity to shape data protection practices at a leading global company.