Security, Governance and POPIA Specialist (Associate)

Zohorecruit; Sandton; Remote; ZAR 443,000 - 664,000; Full time

Job summary

Centrax Digital is an AI-first consulting and digital engineering firm based in Sandton. This Security, Governance and POPIA Specialist (Associate) role focuses on ensuring AI solutions are secure, well governed and POPIA-compliant from the start, working within CAIF-5 governance frameworks.

You baseline client controls, assess risks from AI tools and integrations, and draft acceptable-use principles and governance models, with remote work and occasional client workshops as required.

Qualifications

• 8+ years in information security, privacy or IT risk with 3+ years POPIA work in SA
• Privacy impact assessments carried out and controls designed as a result
• Security or audit certifications preferred (CISSP, CISM, CISA, ISO/IEC 27001)

Responsibilities

• Baseline current security, privacy and AI usage controls, including third-party AI tools in use
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements
• Carry out privacy and AI risk assessments for proposed solutions and pilots
• Design permission, approval and audit models for AI agents
• Draft AI acceptable-use principles and model and tool governance
• Assess AI-specific threats such as prompt injection and data leakage
• Review AI vendor terms for data use, retention, residency and security

Skills

Security governance

Privacy compliance

Information security

Risk assessment

Education

Bachelor's degree in Information Systems, Computer Science or Law

Job description

Security, Governance and POPIA Specialist (Associate)

Contract | Centrax Group | South Africa | Remote Job

Posted On 2026/09/28

Job Information

IT Services

Daily rate, agreed per engagement

City Sandton

State/Province Gauteng

2191

Work Experience 5+ years

Job Description

You make sure the AI solutions Centrax Digital delivers are secure, well governed and compliant with POPIA from the start.

About Centrax Digital

Centrax Digital is an AI-first consulting and digital engineering firm operating from Bryanston, Sandton and Grand Prairie, Texas. We are a Level 1 B-BBEE, black woman-owned Advanced Zoho Partner. Our work spans AI and advisory, platforms, cloud and security, and digital engineering, delivered on our own published methodology. Because Innovation Matters.

The Role

An associate role, engaged per engagement under a statement of work. You baseline client controls, assess the risks that AI tools, agents and integrations introduce, and recommend practical controls that suit the client's size and risk, working within the Govern pillar of CAIF-5.

What you will do

• Baseline current security, privacy and AI usage controls, including third-party AI tools in use.
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements.
• Carry out privacy and AI risk assessments for proposed solutions and pilots.
• Design permission, approval and audit models for AI agents.
• Draft AI acceptable-use principles and model and tool governance.
• Assess AI-specific threats such as prompt injection and data leakage.
• Review AI vendor terms for data use, retention, residency and security.

What you need

• Bachelor's degree in Information Systems, Computer Science, Law or a related field.
• Minimum 8 years' experience in information security, privacy or IT risk, including at least 3 years of POPIA compliance work in South Africa.
• Privacy impact assessments carried out and controls designed as a result.
• A privacy certification (CIPP/E, CIPM or POPIA-specific) and a security or audit certification (CISSP, CISM, CISA or ISO/IEC 27001) are preferred. ISO/IEC 42001 is an advantage.

Where the boundaries sit

This role gives governance and compliance advice. Legal interpretation sits with the Centrax Head of Legal or the client's own counsel.

Working arrangements

Remote, with attendance at client workshops as required. Scope, days and daily rate are agreed per engagement. Conflict of interest disclosure is required before appointment.

Employment equity and POPIA

Centrax Digital is an equal opportunity employer. By applying, you consent to the processing of your personal information for recruitment purposes in accordance with POPIA.