Security, Governance and POPIA Specialist (Associate)

Centrax Group; Sandton; Remote; ZAR 221,000 - 461,000; Part time

Job summary

Centrax Digital is seeking an Associate to baseline client security controls, assess AI usage and POPIA risk, and recommend practical governance measures tailored to the client's size and risk, working within CAIF-5 governance.

You will conduct privacy and AI risk assessments, design permission and audit models for AI agents, draft AI acceptable-use principles, and review vendor terms for data use, retention and security in remote engagements.

Qualifications

• Bachelor's degree or higher in Information Systems, Computer Science, Law or related field.
• Minimum 8 years' experience in information security, privacy or IT risk, including 3+ years of POPIA compliance work in South Africa.
• Privacy impact assessments carried out and controls designed as a result.
• A privacy certification (CIPP/E, CIPM or POPIA-specific) and a security or audit certification (CISSP, CISM, CISA or ISO/IEC 27001) are preferred.
• ISO/IEC 42001 is an advantage.

Responsibilities

• Baseline current security and privacy controls, including third-party AI tools in use.
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements.
• Carry out privacy and AI risk assessments for proposed solutions and pilots.
• Design permission, approval and audit models for AI agents.
• Draft AI acceptable-use principles and model and tool governance.
• Assess AI-specific threats such as prompt injection and data leakage.
• Review AI vendor terms for data use, retention, residency and security.

Skills

POPIA compliance

Education

Bachelor's degree in Information Systems, Computer Science, or Law

Job description

You make sure the AI solutions Centrax Digital delivers are secure, well governed and compliant with POPIA from the start.

ABOUT CENTRAX DIGITAL

Centrax Digital is an AI-first consulting and digital engineering firm operating from Bryanston, Sandton and Grand Prairie, Texas. We are a Level 1 B-BBEE, black woman-owned Advanced Zoho Partner. Our work spans AI and advisory, platforms, cloud and security, and digital engineering, delivered on our own published methodology. Because Innovation Matters.

THE ROLE

An associate role, engaged per engagement under a statement of work. You baseline client controls, assess the risks that AI tools, agents and integrations introduce, and recommend practical controls that suit the client's size and risk, working within the Govern pillar of CAIF-5.

WHAT YOU WILL DO

• Baseline current security, privacy and AI usage controls, including third-party AI tools in use.
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements.
• Carry out privacy and AI risk assessments for proposed solutions and pilots.
• Design permission, approval and audit models for AI agents.
• Draft AI acceptable-use principles and model and tool governance.
• Assess AI-specific threats such as prompt injection and data leakage.
• Review AI vendor terms for data use, retention, residency and security.

WHAT YOU NEED

• Bachelor's degree in Information Systems, Computer Science, Law or a related field.
• Minimum 8 years' experience in information security, privacy or IT risk, including at least 3 years of POPIA compliance work in South Africa.
• Privacy impact assessments carried out and controls designed as a result.
• A privacy certification (CIPP/E, CIPM or POPIA-specific) and a security or audit certification (CISSP, CISM, CISA or ISO/IEC 27001) are preferred.
• ISO/IEC 42001 is an advantage.

WHERE THE BOUNDARIES SIT

This role gives governance and compliance advice. Legal interpretation sits with the Centrax Head of Legal or the client's own counsel.

WORKING ARRANGEMENTS

Remote, with attendance at client workshops as required. Scope, days and daily rate are agreed per engagement. Conflict of interest disclosure is required before appointment.

EMPLOYMENT EQUITY AND POPIA

Centrax Digital is an equal opportunity employer. By applying, you consent to the processing of your personal information for recruitment purposes in accordance with POPIA.

This is a remote position.