Job Description
The main purpose of the job is to provide legal support in respect of the company’s compliance and information management function, particularly, in relation to the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA). Thus, ensuring that all compliance related matters are timeously and appropriately identified, mitigated, and reported, so as to achieve the company’s continuous compliance with relevant laws, regulations and internal policies.

Roles and Responsibilities
Management of the company’s promotion of access to information responsibilities in terms of PAIA, inclusive of:
The development of a PAIA Manual;
Receipt and management of PAIA requests;
Analysis of PAIA requests and formulating legally sound recommendations on responses thereto;
Maintenance of a register of PAIA requests and relevant activities;
PAIA reporting;
Liaising with the Information Regulator on any other matters related to PAIA; and
Provision of legal and administration advice related to PAIA.

2. Management of the company’s protection of personal information responsibilities in terms of POPIA, inclusive of:

The development and/or maintenance of the POPIA Management Framework and tools;
Management of POPIA related queries (internal and external);
Receipt, consideration and administration of POPIA requests, complaints and/or data breach notifications;
Investigation of reported Data Breaches in line with the company policy;
Maintenance of POPIA related registers i.e. operators, complaints, data breach, requests etc;
Liaising with the Information Regulator on any other matters related to POPIA; and
Provision of legally sound advice on POPIA related matters.

3.Compliance Management, which includes:

Development and maintenance of the company compliance framework and program;
Supporting the development and maintenance of the company Regulatory Universe;
Overseeing the development and implementation of compliance risk management plans;
Development and implementation of a compliance monitoring program;
Compliance reporting;
Conducting compliance awareness programs, including related training; and
Providing legally sound compliance related advice]

4. Ad hoc functions, which include:

Serving on the Data Protection and Records Management Forum.
Assisting the Director Legal in the consideration and investigation of whistleblowing complaints and/or complaints lodged in terms of the company Fraud Prevention Policy.
Provision of support in relation to the management or the company Intellectual property portfolio: governance framework, registration, enforcements etc.
Provision of legal advice on a variety of legal matters.

Job Requirements
LLB
Admitted Legal Practitioner.
A minimum of 3 years post qualification experience in a legal role.
Thorough knowledge and understanding the PAIA and POPIA, with at least 2 years prior experience in dealing directly with relevant requests, processes and reporting.
Knowledge and understanding the Compliance Institute of SA Compliance Framework.
Experience in legislative interpretation and implementation.
Knowledge and understanding of the company’s mandate and enabling legal framework i.e. APA and PFMA;
Proficiency in MS Office
Compliance management experience
POPIA / PAIA training
Certificate in compliance management
Registration with the Compliance Institute of SA(CISA)

Skills and Personal Attributes
Deadline driven with high level of accuracy and meticulous attention to detail
Unquestionable ethics, integrity and commitment
Facilitation and presentation skills
Investigative skills
Exceptional drafting / writing skills
Excellent verbal and written communication in English
Excellent interpersonal skills
Ability to work under pressure, independently and as part of a team
Analytical and problem solving skills
Innovative and computer savvy
Initiative and result driven
Attention to detail
Decisive