Data Privacy Officer

  • Full Time
  • Gauteng

Website Access Bank

Access Bank South Africa brings you more than banking. We’re evolving to redefine the power of relationship. As your partner, we’re part of your business and community, giving you access to our advice, insight, specialist knowledge and experience from decades of banking across the globe. Toge… read morether with exceptional banking solutions, you get the advantage you need to grow sustainably. Access Bank Plc. is a leading full-service commercial Bank and operates across ten African countries, the UAE and UK, with representative offices in China, India and Lebanon.

Impact on Business Results:

Reduces regulatory fines and legal exposure through compliance with POPIA and GDPR
Protects bank reputation and strengthens customer trust by safeguarding personal data
Enables faster, compliant product launches by embedding privacy-by-design
Improves operational efficiency by reducing incidents, rework, and audit findings

Requirements

Data Privacy Governance & Compliance:

Develop, implement, and oversee the organization’s data privacy strategy and policies.
Ensure compliance with applicable data protection laws (e.g., POPIA, GDPR, and other relevant regulations).
Maintain and update privacy frameworks, standards, and procedures.
Monitor regulatory changes and advise the business on implications.

Legal Advisory & Risk Management:

Provide legal guidance on data protection obligations, contracts, and data-sharing agreements.
Conduct privacy impact assessments (PIAs/DPIAs) and risk assessments.
Advise on cross-border data transfers and third-party data processing risks.
Support legal teams in managing data breaches, investigations, and regulatory inquiries.

Data Protection Operations:

Oversee data mapping, classification, and records of processing activities.
Ensure appropriate data retention and deletion practices are in place.
Collaborate with IT and Security teams to ensure privacy-by-design and privacy-by default principles.
Review and approve data protection controls in systems and projects.

Stakeholder Engagement:

Act as the primary point of contact for regulators, auditors, and internal stakeholders on privacy matters.
Liaise between Legal, IT, Compliance, Risk, and Business Units.
Provide expert input into business initiatives involving personal data.

Training Awareness:

Develop and deliver privacy training and awareness programs across the organization.
Promote a culture of data protection and ethical data use.

Incident and Breach Management:

Lead response to data breaches and privacy incidents.
Ensure timely reporting to regulators and affected parties where required.
Maintain incident logs and implement corrective actions.

Policies and Procedures:

Develop, implement, and maintain data privacy policies, standards, and SOPs
Ensure adherence to internal governance frameworks and regulatory requirements (e.g., POPIA)
Oversee data classification, retention, access control, and breach response procedures
Regularly review, update, and embed policies through audits, training, and controls

People Management:

Drive training and awareness programs to build a privacy-first culture across the bank
Collaborate and influence senior stakeholders across Legal, IT, Risk, and Business Units
Set clear objectives, monitor performance, and ensure accountability within the team

Academic Requirement:

Bachelor’s degree in Law, Information Technology, or related field (LLB preferred for Legal alignment).
Postgraduate qualification or certification in Data Privacy (e.g., CIPP/E, CIPM) is advantageous.

Work Experience:

5–10+ years’ experience in data privacy, legal compliance, or information security.
Proven experience transitioning or working across IT and Legal functions is highly desirable.

Apply via company website ( N / A ) or

jobs.workable.com

 

To apply for this job please visit jobs.workable.com.

More posts