POPIA / Data Protection Lead (Cloud Environment)

RedM Professional Services • Full-time • Johannesburg • 1w ago

Introduction

The POPIA / Data Protection Lead is responsible for developing, implementing, and maintaining the organisation’s data privacy and protection framework in line with POPIA and other applicable data protection regulations. The role ensures compliance across all business and technology environments, with a strong focus on cloud platforms, data governance, and enterprise risk management.

Duties & Responsibilities

Data Protection Strategy & Governance

Develop and implement the organisation’s data protection and privacy framework.
Ensure compliance with POPIA and relevant international data protection regulations.
Establish and maintain data governance policies, standards, and procedures.
Conduct and maintain Data Protection Impact Assessments (DPIAs).

Cloud & Data Security Oversight

Ensure secure processing, storage, and transfer of personal data in cloud environments.
Collaborate with cloud, infrastructure, and security teams to enforce privacy-by-design principles.
Ensure proper configuration of cloud platforms including access controls, encryption, and logging.
Monitor data flows across cloud and hybrid environments for compliance risks.

Risk & Compliance Management

Identify, assess, and mitigate privacy and data protection risks across systems and processes.
Ensure readiness for internal and external audits related to POPIA and data governance.
Manage data breach response, reporting, and remediation processes.
Maintain compliance with organisational risk management frameworks.

Stakeholder Engagement

Act as the subject matter expert and advisor on POPIA and data privacy matters.
Collaborate with Legal, Risk, Compliance, IT Security, and business stakeholders.
Provide guidance on privacy requirements for projects, systems, and new initiatives.

Data Lifecycle Management

Oversee data classification, retention, archiving, and disposal processes.
Ensure personal information is handled appropriately throughout its lifecycle.
Promote data minimisation and responsible data usage practices.

Awareness & Training

Drive organisation-wide data protection awareness and training programmes.
Promote a strong privacy and compliance culture across all departments.

Desired Experience & Qualification

Minimum Requirements

Qualification:
B Degree / NQF Level 6 in Law, Information Technology, Information Governance, Risk Management, or related field
Experience:
- Minimum 5+ years in data protection, privacy, or information security roles
- Minimum 3+ years in POPIA compliance and privacy management
- Strong experience working in cloud environments (Azure, AWS, or Oracle Cloud)
- Experience in data governance, risk management, and regulatory compliance
- Required
- POPIA compliance and privacy frameworks
- Data governance, classification, and lifecycle management
- Cloud platforms (Azure, AWS, Oracle Cloud)
- Risk and compliance frameworks
- Data encryption, IAM, and access control principles