Data Privacy Associate

Team – Data Protection Officer: Global Markets 

Working Pattern - Hybrid – 2 days per week in the Vitality Sandton, South Africa, Office. Full time, 37.5 hours per week. 

Top 3 skills needed for this role:

• Data privacy compliance & regulatory knowledge (GDPR, POPIA, etc.)
• Risk assessment & audits (PIAs, vendor reviews, compliance monitoring)
  
• Strong stakeholder communication & documentation skills

What this role is all about:

The Data Privacy Associate plays a key role in supporting the organisation’s data privacy capability by enabling effective governance, ensuring regulatory compliance, and strengthening how personal data is managed across global markets. At its core, the role supports the full data privacy lifecycle from impact assessments and audits to policy management and stakeholder advisory ensuring that privacy risks are proactively managed, and regulatory obligations are consistently met.

Key Actions

• Support the Data Protection Officer in maintaining and enhancing the data privacy governance framework across multiple jurisdictions
• Conduct data privacy impact assessments, AI assessments, and audits to identify and mitigate privacy risks
• Review data processing agreements and service provider arrangements to ensure compliance with privacy regulations
• Provide compliance support for audits, certifications, and regulatory requirements across regions (e.g. GDPR, CCPA)
• Update and maintain privacy notices, consent frameworks, and related documentation to ensure accuracy and compliance
• Support privacy input into RFPs and business initiatives, enabling informed and compliant decision-making
• Deliver privacy and AI training and awareness to stakeholders across the business
• Respond to data privacy queries and provide guidance to internal teams on privacy obligations and best practices
• Manage privacy tools and systems, ensuring accurate documentation and effective data governance processes

What do you need to thrive?

• Relevant academic background (Bachelor’s degree or Law degree) with a privacy certification such as CIPP/E, CIPP/M, or CIPT
• Around 3+ years’ experience in compliance, legal, risk, or audit, with exposure to data privacy and security
• Experience conducting privacy impact assessments, audits, and reviewing data processing agreements
• Strong grounding in data privacy and protection regulations (e.g. GDPR, CCPA, HIPAA), with the ability to apply this in a practical business context
• Understanding of privacy frameworks and standards (e.g. NIST Privacy Framework, ISO27001)
• Strong analytical thinking and problem-solving skills, with the ability to assess risks and recommend solutions
• Ability to communicate clearly and influence stakeholders, translating complex privacy requirements into practical guidance
• Proficiency in MS Office and privacy tools/systems (e.g. OneTrust, ServiceNow advantageous)
• A proactive, learning mindset with resilience and strong attention to detail