Senior Data Protection Officer
VALR
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
VALR is seeking an experienced Information Officer and DPO to lead POPIA/GDPR compliance, advise on privacy obligations, and govern data protection across AML/crypto operations. You will manage DPIA processes, risk registers, and cross-border data transfers while partnering with Legal, Risk and Engineering teams.
The role requires eight years in data privacy/AML, certifications, and a strong grasp of POPIA, GDPR, and Information Regulator requirements.
Qualifications
- Minimum eight years’ experience in data privacy and AML compliance.
- Diploma or degree in Information Security, Law or Risk.
- Privacy and AML certifications (CIPP/E, CIPM, CAMS).
- Strong knowledge of POPIA, GDPR and information regulator requirements.
Responsibilities
- Act as Information Officer and DPO, maintaining POPIA/GDPR compliance.
- Advise on privacy obligations, monitor risk, and report to leadership.
- Oversee data subject requests, PAIA requests, and cross-border disclosures.
- Manage data protection in AML/crypto operations, KYC and monitoring.
- Oversee DPIA, risk registers, and security governance across products.
Skills
Education
Tools
Job description
Founded in 2018, headquartered in Johannesburg, and backed by leading investors including Pantera Capital, Coinbase Ventures and Fidelity’s F-Prime Capital, VALR is a global crypto exchange offering a comprehensive suite of products—including Spot Trading, Spot Margin, Perpetual Futures, Staking, Lending, Borrowing, OTC services, VALR Invest, Crypto Bundles, and VALR Pay. Licensed by South Africa’s FSCA, with regulatory approval in Europe, VALR serves over 1.7 million registered users and 2,000 corporate and institutional clients worldwide. The exchange is dedicated to advancing a just financial future that upholds human dignity and the unity of mankind. For more information, visit valr.com.
Founded in 2018, headquartered in Johannesburg, and backed by leading investors including Pantera Capital, Coinbase Ventures and Fidelity’s F-Prime Capital, VALR is a global crypto exchange offering a comprehensive suite of products—including Spot Trading, Spot Margin, Perpetual Futures, Staking, Lending, Borrowing, OTC services, VALR Invest, Crypto Bundles, and VALR Pay. Licensed by South Africa’s FSCA, with regulatory approval in Europe, VALR serves over 1.7 million registered users and 2,000 corporate and institutional clients worldwide. The exchange is dedicated to advancing a just financial future that upholds human dignity and the unity of mankind. For more information, visit valr.com.
To establish VALR as a global institution that advances the economic life of human civilisation through a borderless, inclusive, and empowering financial ecosystem.
To contribute towards a global financial system that upholds justice, fosters human dignity, and reflects the oneness of humanity, by serving the financial needs of individuals, communities, and institutions through innovative financial technologies
- At least 8 years’ experience in data privacy and protection and anti-money laundering (AML) compliance, with substantial hands‑on experience in both, preferably at a crypto asset service provider, fintech or financial institution.
- A relevant diploma, degree or equivalent practical experience in Information Security, Law, Compliance or Risk.
- A recognised privacy certification (e.g. CIPP/E, CIPM) and AML certification (e.g. CAMS, CCAS).
- Strong knowledge of POPIA, PAIA and GDPR, including Information Regulator requirements and the role of Information Officers and Deputy Information Officers.
- Strong knowledge of AML/CFT frameworks, including the FIC Act, FATF standards for virtual assets and VASPs, and the Travel Rule.
- Working knowledge of cybersecurity principles, including authentication, MFA, IAM, encryption, access control, DLP, logging, cloud security and incident response.
- A keen interest in Artificial Intelligence and its privacy and data governance implications.
- Advantageous: experience across VALR’s jurisdictions – South Africa (FIC Act, FAIS; Information Regulator, FIC, FSCA), Africa (e.g. Kenya’s Data Protection Act and VASP Act), Europe (MiCA, EU AML framework) and the Caribbean (Cayman Islands Data Protection Act, AML Regulations and Virtual Asset (Service Providers) Act; CIMA).
- Information Officer and DPO duties
- Maintain VALR’s POPIA compliance framework and PAIA manual, and act as the contact point for the Information Regulator, other supervisory authorities and data subjects.
- Inform and advise the business and staff on their POPIA and GDPR obligations, monitor compliance, and report on privacy risk and compliance status to executive leadership.
- Oversee data subject requests, PAIA requests involving personal information and other privacy rights within statutory timeframes.
- Govern cross‑border transfers and disclosures of personal information to third parties.
- Data protection in AML and crypto operations
- Ensure KYC, CDD, enhanced due diligence, transaction monitoring and blockchain analytics data is collected, used, shared and retained lawfully under both AML and data protection laws.
- Govern Travel Rule data exchanged with counterparty VASPs and reconcile AML record‑keeping periods with data retention requirements.
- Support the MLCO/MLRO on STR confidentiality and preventing tipping off.
- Privacy and security risk management
- Manage VALR’s DPIA and security risk assessment processes for products, systems, vendors and processing activities, maintain the risk registers and track remediation.
- Escalate material privacy or security risks where controls are inadequate or remediation is outstanding.
- Oversee Data Loss Prevention (DLP) controls, segregation of customer personal data between administrative and standard user environments and devices, and separation of privileged, administrative and standard access roles.
- Application, SaaS and AI approval
- Manage the approval process for SaaS platforms, AI tools, browser applications, APIs and integrations, reviewing security safeguards, privacy terms, DPAs and sub‑processors.
- Assess AI processing, including whether VALR or personal information may be used for model training, and monitor approved applications for material changes in permissions, data access or risk.
- Incidents and breaches
- Assess security incidents for impact on personal information and lead required notifications to the Information Regulator, other supervisory authorities and affected data subjects.
- Maintain incident and breach records and track corrective actions.
- Privacy by design and compliance
- Work with Engineering, Product, Risk and Security to embed privacy by design and by default (data minimisation, access restriction, retention and secure handling), including reviews of architecture, data flows, APIs, databases, cloud services and integrations.
- Draft and maintain privacy and security policies, standards and procedures, and keep evidence of compliance.
- Monitor changes in privacy, data protection, cybersecurity and AML law, guidance and standards, and assess their impact on VALR.
- Deliver practical privacy and cybersecurity advice and training to staff and business teams.
- Innovative Work Environment
- Engage with the latest blockchain technologies and tools in a rapidly evolving industry.
- Work from anywhere with secure, stable internet connectivity, allowing you to create your ideal workspace.
- Career Development
- Benefit from an annual professional development allowance alongside scheduled company training sessions to keep you at the forefront of the crypto industry.
- Competitive Compensation
- Competitive salaries that align with industry standards.
- When you contribute to our success, you’ll be rewarded with discretionary bonuses, recognising your impact on VALR’s growth.
- Receive preferential Tier 5 trading fees on VALR, with no monthly trading volume required.
- Diversity and Inclusion
- A commitment to fostering a diverse workforce with initiatives that promote equity and belonging.
- Wellness
- Employees are encouraged to strive for coherent and wholesome lives, fulfilling their work, personal, social, physical and spiritual goals to the best of their abilities.
- Compliance with statutory leave required by individual countries, in addition to flexible leave options.
- Enjoy lunch on us when working from our Johannesburg Head Office, one of the ways we support wellbeing and connection in the workplace.
- Impact and Contribution
- At VALR, we believe in a financial system that recognises the oneness of humanity. Our mission is to break down financial barriers and promote universal values of courage, ethical integrity, and the intrinsic worth of every individual.
- Engage in initiatives that promote education and awareness about cryptocurrencies, ensuring that everyone has the tools and knowledge to participate in the evolving financial landscape.
- Dynamic Team Culture
- Open communication and teamwork across departments, fostering innovation and creativity.
- Enjoy social gatherings outside of work to strengthen team bonds and boost morale.
- Global Exposure
- Work with colleagues from around the world.
- Exposure to diverse perspectives and practices in the crypto space.
- Recognition and Rewards
- Regular acknowledgement of employee accomplishments, fostering a culture of appreciation and motivation.
- Join us for retreats that blend professional development with team bonding in inspiring locations.
- Tools for Success
- Receive a Mac laptop and a discretionary allowance to purchase all the extras needed for a productive home office—yours to keep after three years (terms and conditions apply).
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
