Associate Privacy & Cybersecurity Counsel

Job summary

As Associate Privacy & Cybersecurity Counsel you will report directly to our Privacy Counsel based in the USA. Our ideal candidate has experience running privacy compliance assessments and/or audits as well as experience developing and maintaining subject matter expertise in global data protection laws—GDPR, FADP, CCPA, APPI, PIPL, POPIA, HIPAA, etc.

What you will do

• Develop and maintain subject matter expertise in global data protection laws—GDPR, FADP, CCPA, APPI, PIPL, POPIA, HIPAA, etc.
• Assist in negotiating data processing agreements and vendor agreements.
• Support privacy and legal team on routine day-to-day business matters with reasonable degree of independence.
• Coordinate with sales and information security teams on questionnaires and general inquiries.
• Conduct gap analyses and develop solutions to remediate any gaps.
• Assist in conducting annual global privacy audit and remediate any audit findings.
• Draft privacy notices, policies, and procedures.
• Track evolving legislation and emerging areas of risk and regulation related to data protection laws, work with the business and legal colleagues on implementation of new requirements.
• Spearhead other moderately complex projects relating to privacy and information security.
• Work proactively with business and legal partners to identify and address potential regulatory, legal and business risks.
• Exercise judgment and ability to manage competing deadlines.
• Collaborate with legal colleagues to identify legal issues with potential cross-functional impact.
• Communicate and interact effectively and professionally with co-workers, management, customers, and other stakeholders.
• Demonstrate ability and interest in learning and willingness to take on new challenges.
• Maintain complete confidentiality of company business.

What you will have

• Bachelor of Laws (LLB) or equivalent
• Admitted attorney (and in good standing) in South Africa (essential)
• 2+ years relevant post-admission experience (essential)
• 2+ years' experience developing and maintaining subject matter expertise in global data protection laws—GDPR, FADP, CCPA, APPI, PIPL, POPIA, HIPAA, etc. (preferred)
• 2+ years' experience negotiating data processing agreements and vendor agreements (preferred)
• 2+ years' experience running privacy compliance assessments and/or audits (preferred)
• Working knowledge of privacy law
• Familiarity with privacy compliance technologies in the market (preferred)
• CIPP/E, CIPP/US, or similar (preferred)
• Experience handling incidents (preferred)
• Experience drafting policies/procedures (preferred)
• Cybersecurity experience (advantageous)
• Excellent business acumen, well-developed, pragmatic problem-solving abilities, and high emotional intelligence
• Strong work ethic, a "hands-on" mentality, accountability, and the ability to work in a fast-paced, ever-evolving business environment while juggling and prioritizing multiple projects at the same time
• Ethical, adaptable, flexible, and comfortable with uncertainty and ambiguity
• Desire to take on greater responsibility as experience is gained and skills are further developed
• Keen diplomatic instincts and customer service mentality
• Ability to work independently, employ good judgment, act with integrity, take ownership, and seek advice when necessary
• This role may require some travel

Benefits

• Provident Fund
• Medical Aid + Gap Cover
• Employee Assistance Program
• Gym Reimbursement
• Life Insurance
• Disability Insurance
• Sabbatical