Chief Data Privacy Officer Job Vacancy Financial Services & Compliance
Listed on 2026-09-12
-
IT/Tech
Information Security & Data Protection, Cybersecurity
Position Details
Position:
Chief Data Privacy Officer
Company:
Old Mutual Limited
Location:
Johannesburg, South Africa
Experience:
10+ years in data privacy, GDPR, POPIA compliance
Education:
Bachelor’s degree in Law, Information Security or related field;
Master’s preferred
Employment Type:
Full-time
Industry: Financial Services & Compliance
Department:
Legal & Compliance
Salary: SSP 1,200,000 – SSP 1,800,000 per annum
Vacancies:1
Company OverviewOld Mutual Limited is a leading financial services group with a heritage spanning more than a century, offering a broad range of insurance, investment, and wealth management solutions across Africa and beyond. Headquartered in Johannesburg, the company is renowned for its commitment to responsible business practices, innovative product development, and a strong focus on customer centricity. As a major employer in South Africa, Old Mutual consistently ranks among the top destinations for professionals seeking challenging careers, robust development programs, and a collaborative culture.
The organization’s dedication to data protection and regulatory excellence makes it an ideal environment for privacy leaders who wish to shape the future of data governance in the financial sector. This role contributes directly to Old Mutual’s strategic objectives of safeguarding client information, ensuring compliance with the Protection of Personal Information Act (POPIA), and aligning with global standards such as GDPR, thereby reinforcing trust and confidence among stakeholders.
Overview
The Chief Data Privacy Officer (CDPO) will lead Old Mutual’s privacy strategy, overseeing the design, implementation, and continuous improvement of data protection frameworks across all business units. Reporting to the Chief Legal Officer, the CDPO will act as the primary point of contact for regulatory bodies, manage privacy risk assessments, and drive a culture of privacy awareness throughout the organization. This pivotal role involves close collaboration with IT, risk, compliance, and business teams to embed privacy by design into products, services, and processes.
The successful candidate will champion best practices, lead incident response initiatives, and ensure that Old Mutual remains at the forefront of data privacy excellence in South Africa and internationally. For more information about our career opportunities, visit our main portal at
- Develop, implement, and maintain a comprehensive data privacy program aligned with POPIA, GDPR, and other relevant regulations.
- Lead privacy impact assessments (PIAs) for new products, services, and technology initiatives.
- Serve as the primary liaison with the Information Regulator and other supervisory authorities.
- Advise senior leadership on privacy risks, mitigation strategies, and regulatory changes.
- Oversee the investigation and resolution of data breach incidents, including notification processes.
- Design and deliver privacy awareness training for employees at all levels.
- Collaborate with the IT security team to ensure technical safeguards such as encryption, access controls, and anonymization are effectively deployed.
- Monitor and audit data processing activities to ensure ongoing compliance.
- Prepare and present regular reports on privacy metrics and compliance status to the board.
- Foster a culture of privacy by embedding privacy considerations into business decision‑making.
- Deep expertise in POPIA, GDPR, and international data protection frameworks.
- Strong analytical and risk assessment capabilities.
- Excellent communication and stakeholder management skills.
- Proven ability to lead cross‑functional teams and drive change.
- Knowledge of information security principles and technologies.
- Strategic thinking with a…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).