Group Data Compliance Manager

A leading international SaaS company operating in the fintech and proptech sector is seeking an engaging and process-driven Group Data Compliance Manager to join their South African team, reporting directly to the Group Head of Compliance.

The company has collaborated with teams globally to revolutionise property management through technology. Their software helps property professionals across diverse geographical locations to build relationships and grow their businesses. As a Group Data Compliance Manager, you will be responsible for implementing and maintaining a robust data privacy framework across all jurisdictions in which the Group operates.

Key Responsibilities:

1. Establish and manage policies, procedures, and guidelines for jurisdiction-specific data privacy compliance.
2. Track changes in data protection laws and advise on cross-border regulatory implications.
3. Act as the primary resource for Data Protection Officers (DPOs), addressing regulator and data subject inquiries efficiently.
4. Develop and maintain Technical and Organisational Measures (TOMs) to align with local and Group-wide privacy standards.
5. Lead Data Protection Impact Assessments (DPIAs) and Transfer Impact Assessments (TIAs) to identify and mitigate privacy risks.
6. Handle data breaches, ensure timely notifications, and maintain a response plan for effective incident management.
7. Collaborate with stakeholders to review incidents and implement corrective actions.
8. Manage Data Subject Requests (DSARs) and other rights requests (e.g., erasure, portability) in compliance with legal obligations.
9. Create and deliver training to enhance data privacy awareness across jurisdictions.
10. Assess vendor and partner practices, ensuring alignment with privacy policies and risk mitigation as well as evaluate new vendors for compliance with SOPs and privacy standards.
11. Provide regular updates to senior management on compliance status, risks, and improvements.
12. Ensure thorough records of data privacy activities for audits and inspections.

Qualifications and experience:

1. Tertiary-level education in Law, Information Security, or a related field.
2. Professional certifications such as CIPP/E, CIPM, or CIPT are advantageous.
3. Around 5+ years' experience in data protection, privacy, or legal compliance preferably in multinational or tech environments.
4. Proven track record in managing data breaches, conducting DPIAs, and handling DSARs.
5. Strong knowledge of data privacy laws and practical compliance strategies.
6. Excellent communication skills for explaining regulatory concepts to non-experts.
7. Effective organisational and project management abilities in fast-paced settings.
8. High ethical standards with a proactive approach to risk management.
9. Self-motivated and collaborative team player.

Salary and benefits:

1. R800 0000 - 900 000 / year CTC
2. Hybrid working arrangements with 2 days in the Stellenbosch office.
3. An optional Group Retirement Annuity Scheme.
4. Off on weekends and official South African public holidays, plus 20 working days paid annual leave.