(1555) Data Privacy Business Partner - BSTD at South African Reserve Bank

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Facilitate the implementation of personal information (PI) measures, privacy tools, standards and procedures for the assigned business clusters to ensure the lawful processing of PI.
• Conduct impact assessments on current processes and new projects within the assigned clusters to identify compliance gaps and recommend remedial actions.
• Drive the implementation of remedial actions for both existing processes and new projects in the assigned clusters.
• Identify gaps in privacy training and facilitate relevant training within these clusters.
• Conduct and/or oversee audits of existing and new PI processes, including high-risk third parties, following priorities set by the Data Protection Officer.
• Analyse data and identify patterns for the assigned business clusters, providing insights and recommendations to address compliance gaps.
• Prepare privacy reports for the assigned clusters for departmental management committees on compliance with the Protection of Personal Information Act 4 of 2013 (POPIA).
• Ensure that any PI breaches are logged correctly by the assigned business clusters.
• Conduct preliminary investigations into PI breaches and coordinate or participate in problem identification, root cause analysis and making recommendations to prevent future occurrences.
• Stay current with PI knowledge and skills to maintain professional expertise and relevant accreditations.
• Establish and maintain both internal and external stakeholder relations, ensuring continued compliance with PI conditions.
• Keep abreast of industry developments and best practices, ensuring these are applied within own work.  
• Support the implementation of the third-party risk assessment framework to ensure that third-party contracts meet PI requirements.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• a Bachelor’s degree (NQF 7) in either Compliance or Law, or an equivalent qualification in a related field;
• at least five to eight years of relevant work experience in data privacy and protection programme management, audit and/or compliance, practices, processes, risk management and technologies; and 
• at least five years of regulatory experience in the banking industry.