Senior Data Privacy Counsel (Remote)

Placements24; George; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Remote work

Flexible hours

Medical aid

Retirement fund contributions

Professional development

Job summary

Placements24 is seeking a Senior Data Privacy Counsel to join the legal team in a fully remote role across South Africa. You will lead the data protection strategy, develop privacy policies, assess risks, and advise on privacy matters across technology, marketing and HR.

A strong background in POPIA and GDPR is required. You will collaborate with IT, Security, and Compliance to embed privacy-by-design and ensure breach response readiness, including DSARs and DPAs, while driving privacy training

Qualifications

• LLB degree from a recognized university.
• Admitted as an Attorney or Advocate of the High Court of South Africa.
• 7+ years post-qualification experience focused on data privacy and protection law.
• In-depth knowledge of POPIA and GDPR.
• Proven experience developing and implementing privacy programs.

Responsibilities

• Develop and maintain data privacy policies and frameworks in line with POPIA and GDPR.
• Conduct DPIAs and privacy risk assessments for new projects.
• Advise on privacy implications of product development, marketing and operations.
• Manage DSARs and other individual rights under privacy laws.
• Provide privacy training and awareness for staff.
• Investigate and respond to data breaches and notify authorities/affected individuals as required.
• Review DPAs and vendor contracts with a privacy focus.
• Stay updated with global privacy laws and regulatory guidance.
• Collaborate with IT, Security and Compliance on privacy-by-design.
• Represent the company in interactions with data protection authorities.

Skills

Legal analysis

Privacy risk management

Communication

Project management

Independent work

Education

LLB degree

Admitted Attorney/Advocate

CIPP certification

Job description

About the Role

Our client is seeking a highly skilled and dedicated Senior Data Privacy Counsel to join their legal team. This is a fully remote position, allowing you to work from anywhere in South Africa. You will be instrumental in ensuring the company's adherence to data privacy regulations, including POPIA and GDPR where applicable, across all operations. This role involves developing and implementing comprehensive data privacy policies, conducting privacy impact assessments, and advising on data protection matters related to technology, marketing, and HR functions. The ideal candidate will possess a deep understanding of data privacy laws and a proactive approach to risk management in this evolving field. This is a unique opportunity for an experienced privacy lawyer to lead the data protection strategy for a growing organization, making a significant impact on its commitment to data security and individual privacy rights. The fully remote nature of this role offers unparalleled flexibility and autonomy.

Key Responsibilities

• Develop, implement, and maintain robust data privacy policies, procedures, and frameworks in compliance with POPIA, GDPR, and other relevant regulations.
• Conduct Data Protection Impact Assessments (DPIAs) and Privacy Risk Assessments for new projects and initiatives.
• Advise business units on data privacy implications of product development, marketing campaigns, and operational processes.
• Manage data subject access requests (DSARs) and other individual rights under privacy laws.
• Provide training and awareness programs on data privacy best practices for employees.
• Investigate and respond to data breaches, including notification to regulatory authorities and affected individuals as required.
• Review and negotiate data processing agreements (DPAs) and other vendor contracts with a privacy focus.
• Stay current with global data privacy laws and regulatory guidance, providing strategic advice on compliance.
• Collaborate with IT, Security, and Compliance teams to ensure the integration of privacy-by-design principles.
• Represent the company in interactions with data protection authorities.

Requirements

• A Bachelor of Laws (LLB) degree from a recognized university.
• Admitted as an Attorney or Advocate of the High Court of South Africa.
• Minimum of 7 years of post-qualification experience, with a significant focus on data privacy and protection law.
• In-depth knowledge of South African Protection of Personal Information Act (POPIA) and GDPR.
• Proven experience in developing and implementing privacy programs.
• Experience with DPIAs, DSARs, and breach response protocols.
• Excellent understanding of data processing operations and cybersecurity principles.
• Strong analytical, communication, and project management skills.
• Ability to work independently, manage multiple priorities, and thrive in a fully remote environment.
• CIPP or relevant data protection certifications are advantageous.

Benefits

• This fully remote role offers a highly competitive salary and a comprehensive benefits package, including medical aid and retirement fund contributions.
• Employees enjoy the flexibility of working from any location within South Africa, promoting an excellent work-life balance.
• Opportunities for continuous professional development, including specialized training in data privacy, are readily available.
• The company invests in modern technology and resources to support remote work effectively.
• Regular virtual team engagements and collaborative platforms ensure seamless interaction and team cohesion.
• Additional benefits may include performance-based bonuses and flexible working hours.
• The company is committed to fostering a culture of trust, autonomy, and professional growth for its remote workforce, ensuring employees feel valued and connected.