Legal Advisor: Compliance Management

The main purpose of the job is to provide legal support in respect of the company’s compliance and information management function, particularly, in relation to the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA). Thus, ensuring that all compliance related matters are timeously and appropriately identified, mitigated, and reported, so as to achieve the company’s continuous compliance with relevant laws, regulations and internal policies.

Management of the company’s promotion of access to information responsibilities in terms of PAIA, inclusive of:

The development of a PAIA Manual;

Receipt and management of PAIA requests;

Analysis of PAIA requests and formulating legally sound recommendations on responses thereto;

Maintenance of a register of PAIA requests and relevant activities;

PAIA reporting;

Liaising with the Information Regulator on any other matters related to PAIA; and

Provision of legal and administration advice related to PAIA.

2. Management of the company’s protection of personal information responsibilities in terms of POPIA, inclusive of:

The development and/or maintenance of the POPIA Management Framework and tools;

Management of POPIA related queries (internal and external);

Receipt, consideration and administration of POPIA requests, complaints and/or data breach notifications;

Investigation of reported Data Breaches in line with the company policy;

Maintenance of POPIA related registers i.e. operators, complaints, data breach, requests etc;

Liaising with the Information Regulator on any other matters related to POPIA; and

Provision of legally sound advice on POPIA related matters.

3.Compliance Management, which includes:

Development and maintenance of the company compliance framework and program;

Supporting the development and maintenance of the company Regulatory Universe;

Overseeing the development and implementation of compliance risk management plans;

Development and implementation of a compliance monitoring program;

Compliance reporting;

Conducting compliance awareness programs, including related training; and

Providing legally sound compliance related advice]

4. Ad hoc functions, which include:

Serving on the Data Protection and Records Management Forum.

Assisting the Director Legal in the consideration and investigation of whistleblowing complaints and/or complaints lodged in terms of the company Fraud Prevention Policy.

Provision of support in relation to the management or the company Intellectual property portfolio: governance framework, registration, enforcements etc.

Provision of legal advice on a variety of legal matters.

LLB

Admitted Legal Practitioner.

A minimum of 3 years post qualification experience in a legal role.

Thorough knowledge and understanding the PAIA and POPIA, with at least 2 years prior experience in dealing directly with relevant requests, processes and reporting.

Knowledge and understanding the Compliance Institute of SA Compliance Framework.

Experience in legislative interpretation and implementation.

Knowledge and understanding of the company’s mandate and enabling legal framework i.e. APA and PFMA;

Proficiency in MS Office

Compliance management experience

POPIA / PAIA training

Certificate in compliance management

Registration with the Compliance Institute of SA(CISA)

Skills and Personal Attributes

Deadline driven with high level of accuracy and meticulous attention to detail

Unquestionable ethics, integrity and commitment

Facilitation and presentation skills

Investigative skills

Exceptional drafting / writing skills

Excellent verbal and written communication in English

Excellent interpersonal skills

Ability to work under pressure, independently and as part of a team

Analytical and problem solving skills

Innovative and computer savvy

Initiative and result driven

Attention to detail

Decisive