Lead, Data Privacy, SBG - Johannesburg at Standard Bank Group

JOB DESCRIPTION

• To lead the implementation of the Standard Bank Risk Management Data Privacy Compliance Framework and as it relates to the holistic approach to Information Risk Management. To ensure Group compliance with applicable Privacy laws, regulations and industry standards including the all the SBG entities and jurisdictions. To lead the implementation of the Data Privacy Compliance Framework across all countries & jurisdictions.

QUALIFICATIONS

Key Responsibilities:

• Work closely together with Business Units, Information Risk and Legal to ensure that intercompany legal agreements meets regulatory requirements and enables the interoperability of personal information across the Group. 
• Collaborate with various stakeholders across the Group (e.g. Internal Audit Group Risk, Compliance, People and Culture, Legal) and other internal stakeholders ensuring group-wide alignment between Data Privacy and the Group’s Ethics and Code of Conduct statement. 
• Provide specialised advice to senior stakeholders across Business Units, Legal Entities and Corporate Functions in collaboration with key stakeholders such Non-Financial Risk, Information Technology, Compliance, Group Legal and Local Data Privacy Officers, across all countries & jurisdictions, on the required minimum standards, strategies, projects, plans, initiatives, reporting and other relevant activities to ensure compliance with all standards and legislative requirements.
• Develop the Data Privacy Compliance Framework - covering strategy, policy, process, procedures, standards, guidelines, training, objectives, metrics and governance - to ensure consistency of implementation and the alignment to the changing regulatory and legislative requirements across all relevant countries and jurisdictions and international best practices and standards.
• Devise and agree Data Privacy Operating Standards and other related data privacy policy documents at a Group level, ensuring alignment with the implementation of personal information processing activities across the Group.

Qualifications

• A degree in Information Technology is required  
• A Degree in Legal is compulsory for this role. 

Experience: 

• The candidate requires Banking experience. Deep level of understanding of Financial Services and the importance of Data Privacy. The candidate requires risk management experience.
• The role requires a leader seasoned and expert in Legal and Risk Management with profound knowledge of the full dimensions of the field, but deep expertise in the relevant area of specialisation - Data Privacy. Regulatory environment savvy, a proven track record in influencing seasoned leaders and employees across multiple countries, Client Segments and Client Solutions to effectively implement Data Privacy Compliance Frameworks. Be able to quote the acts applicable to Data Privacy.

ADDITIONAL INFORMATION

Behavioral Competencies:

• Convincing People
• Developing Expertise
• Developing Strategies
• Directing People
• Embracing Change
• Empowering Individuals
• Establishing Rapport
• Exploring Possibilities
• Interpreting Data
• Making Decisions
• Providing Insights
• Upholding Standards

Technical Competencies:

• Compliance
• Financial Industry Regulatory Framework
• Information Management
• Legal Compliance
• Promote Good Governance, Risk & Control
• Risk Management