Senior Specialist: Privacy Job Johannesburg area,South Africa,IT/Tech

When it comes to putting people first, we're number 1.

The number 1 Top Employer in South Africa. Certified by the Top Employer Institute 2026.

Role Purpose/Business Unit:

To identify, document and assess Vodacom SA’s existing processing of personal information activities(and changes in such activities) in order to identify privacy risks and issues and assist business operations to mitigate same and implement appropriate privacy control measures.
To conduct privacy impact assessments (Privacy by Design & Assurance) of new processes, products and systems to be launched by Vodacom SA in order to to identify privacy risks and issues and assist business operations to mitigate same and implement appropriate privacy control measures before launch.
To assist in the development, implementation and rollout of the privacy program elements and controls across Vodacom SA and its subsidaries in order minimize compliance risks and ensuring adherence to Vodacom/Vodafone privacy frameworks, policies, standards and methodologies. Support the Privacy Governance, Risk and Control (GRC) function to execute on their privacy control monitoring, risk management, assurance and reporting activities.
To assist in Vodacom SA privacy counsel and governance activities, which includes setting out data processing agreements; monitoring regulatory/legislative developments; updating company policies, processes and procedures in line with new privacy requirements; supporting data subjects in exercising their privacy rights; and supporting regulatory engagement activities (such as compliance reviews and addressing privacy complaints).
To assist in the development and fulfilment of privacy training and awareness initiatives across the Vodacom SA privacy capabilities.
To support the customisation and adoption of the above for purposes of Vodacom group-wide adoption and application.

Your responsibilities will include:

Personal Data Processing Register (PDPR):
Ensure the PDPR is maintained and up-to-date in line with Vodacom standards and methodologies, including but not limited to the linking of business processes and data flow maps. Moreover, identify and conduct privacy assessments on existing processes, products & assets processing personal information in line with Vodacom SA requirements and quality assurance standards.
Conduct Privacy Impact Assessments (PIAs):
Assess privacy risks for new projects, systems, or processes, and recommend risk mitigation strategies. Collaborate with cross-functional teams to design and integrate privacy considerations into new processing activities. Collaborate with technical teams to implement privacy-by-design principles and perform technical assessments of systems, applications, and infrastructure to ensure compliance with privacy requirements.
Conduct Privacy Training and Awareness:
Deliver privacy training and awareness initiatives, educating employees on policies, regulations, and best practices. Foster a privacy-conscious culture
Compliance, Monitoring, Reporting:
Conduct privacy assurance reviews and assessments, including self assessments (evidence based testing) of privacy activities and controls and communicate critical risks and issues to management. Perform oversight of remedial actions to address privacy risks and issues identified. Prepare privacy reports for various stakeholders and committees (including the Vodacom Group Privacy Steering Committee, Privacy KPI quarterly reporting). Monitor the implementation of the privacy program by Vodacom SA subsidiaries.

Privacy compliance/legal advisory and support:
Provide privacy compliance/legal advisory and support to Vodacom SA’s business operations, which includes adherence to the Protection of Personal Information Act, No 4 of 2013…