Remote Senior Data Protection & Privacy Lead (Crypto)

VALR; Johannesburg; Remote; ZAR 900,000 - 1,400,000; Full time

Benefits offered by this job

Professional development allowance

Discretionary bonuses

Competitive compensation

Lunch at Johannesburg Head Office

Work from anywhere with secure access

Job summary

VALR is seeking an experienced Information Officer and DPO to lead POPIA/GDPR compliance, advise on privacy obligations, and govern data protection across AML/crypto operations. You will manage DPIA processes, risk registers, and cross-border data transfers while partnering with Legal, Risk and Engineering teams.

The role requires eight years in data privacy/AML, certifications, and a strong grasp of POPIA, GDPR, and Information Regulator requirements.

Qualifications

• Minimum eight years’ experience in data privacy and AML compliance.
• Diploma or degree in Information Security, Law or Risk.
• Privacy and AML certifications (CIPP/E, CIPM, CAMS).
• Strong knowledge of POPIA, GDPR and information regulator requirements.

Responsibilities

• Act as Information Officer and DPO, maintaining POPIA/GDPR compliance.
• Advise on privacy obligations, monitor risk, and report to leadership.
• Oversee data subject requests, PAIA requests, and cross-border disclosures.
• Manage data protection in AML/crypto operations, KYC and monitoring.
• Oversee DPIA, risk registers, and security governance across products.

Skills

Data privacy

AML compliance

Information security

POPIA knowledge

GDPR knowledge

Cross-border

Education

Diploma/degree in Law or InfoSec

Privacy certification (CIPP/E, CIPM)

AML certification (CAMS)

Tools

Policy management tools

Job description

VALR is seeking an experienced Information Officer and DPO to lead POPIA/GDPR compliance, advise on privacy obligations, and govern data protection across AML/crypto operations. You will manage DPIA processes, risk registers, and cross-border data transfers while partnering with Legal, Risk and Engineering teams.

The role requires eight years in data privacy/AML, certifications, and a strong grasp of POPIA, GDPR, and Information Regulator requirements.