Privacy Specialist at KPMG South Africa

Overall Purpose Of The Role

• Supporting the firm’s Privacy Liaison in establishing and managing the firm’s data protection and privacy program covering the firm’s products, services and solutions, including identifying emerging risks, defining appropriate policies and processes, performing data privacy impact assessments and embedding data protection and privacy by design and providing awareness training to staff.

Position Specifications

• Educational (minimum level necessary to perform the job)

Professional/Tertiary

• Professional
• LLB Degree would be preferential

Other requirements
Experience (minimum necessary before being considered for the job)
Desired Qualification And Experience

• 4-6 year’s work experience in Data Privacy and protection management, processes, practices, risk management, audit and compliance monitoring
• Demonstratable knowledge of data protection laws and concepts
• Experience with identifying, analysing, and reporting on risk indicators related to Data Protection and Privacy
• Relevant Data Protection and Privacy related certification such as CIPP, CIPM, CIPT would be an advantage
• Data Protection and privacy auditing experience would be an advantage

Core Competencies (Attributes)

• Attention to detail and accurate documentation
• Ability to analyse and interpret information
• Able to work independently and as part of a team
• Ability to organise and prioritise multiple tasks and work under pressure
• List of Key Performance Areas & Key Performance Indicators

Main Responsibilities

List the tasks underpinning the responsibility

• Conduct Data Privacy Impact Risk Assessments
• Managing and conducting new and annual third-party Data Privacy Impact Risk Assessments
• Managing and conducting new Data Privacy Impact Risk Assessments on new Systems/Application/Solutions
• Assist with Internal and External Audits
• Assist with the preparation and completion of annual internal audits
• Management of privacy related remediation actions
• Assist with the completion of external audits by third parties
• Assist with Compliance Reviews
• Conduct compliance reviews on the performance of the firm’s data protection and privacy controls and provide oversight of the implementation of redial actions where issues are discovered
• Privacy Awareness Training
• Assist with the rollout of annual Information Security Awareness Training programme
• Development of monthly Data Protection and Privacy Awareness content
• Assist with Client Questionnaires and contract review
• Management of the completion of data protection and privacy related client questionnaires
• Review of third-party and client data protection and privacy related contractual clauses
• Creating status reports for all audit and compliance activities
• Create monthly status reports on operational activities
• Support the implementation of Data Protection and privacy related projects and related initiatives
• Provide support with the execution of project and /or initiatives related to Data Protection and Privacy matters