Lead, Data Privacy, Standard Bank Group

Company Description

Standard Bank Group is a leading Africa-focused financial services group, and an innovative player on the global stage, that offers a variety of career-enhancing opportunities – plus the chance to work alongside some of the sector’s most talented, motivated professionals. Our clients range from individuals, to businesses of all sizes, high net worth families and large multinational corporates and institutions. We’re passionate about creating growth in Africa. Bringing true, meaningful value to our clients and the communities we serve and creating a real sense of purpose for you.

Job Description

To lead the implementation of the Standard Bank Risk Management Data Privacy Compliance Framework and as it relates to the holistic approach to Information Risk Management. To ensure Group compliance with applicable Privacy laws, regulations and industry standards including the all the SBG entities and jurisdictions. To lead the implementation of the Data Privacy Compliance Framework across all countries & jurisdictions.

Qualifications

• A degree in Information Technology is required or a degree in Legal is compulsory for this role

Experience Required:

• The candidate requires Banking experience. Deep level of understanding of Financial Services and the importance of Data Privacy. The candidate requires risk management experience.
• The role requires a leader seasoned and expert in Legal and Risk Management with profound knowledge of the full dimensions of the field, but deep expertise in the relevant area of specialisation - Data Privacy. Regulatory environment savvy, a proven track record in influencing seasoned leaders and employees across multiple countries, Business Units and Group Functions to effectively implement Data Privacy Compliance Frameworks. Be able to quote the acts applicable to Data Privacy.
• Experience in facilitating cross border data transfers from GDPR equivalent jurisdictions to Africa, and in between African jurisdictions and putting in place the necessary contractual clauses to make these transfers lawful. 

Additional Information

Key Responsibilities:

• Work closely together with Business Units, Information Risk and Legal to ensure that intercompany legal agreements meets regulatory requirements and enables the interoperability of personal information across the Group. 
• Collaborate with various stakeholders across the Group (e.g. Internal Audit Group Risk, Compliance, People and Culture, Legal) and other internal stakeholders ensuring group-wide alignment between Data Privacy and the Group’s Ethics and Code of Conduct statement. 
• Provide specialised advice to senior stakeholders across Business Units, Legal Entities and Group Functions in collaboration with key stakeholders such Non-Financial Risk, Information Technology, Compliance, Group Legal and Local Data Privacy Officers, across all countries & jurisdictions, on the required minimum standards, strategies, projects, plans, initiatives, reporting and other relevant activities to ensure compliance with all standards and legislative requirements.
• Develop and coordinate the Data Privacy Compliance Framework - covering strategy, policy, process, procedures, standards, guidelines, training, objectives, metrics and governance - to ensure consistency of implementation and the alignment to the changing regulatory and legislative requirements across all relevant countries and jurisdictions and international best practices and standards.
• Facilitate and coordinate the Group Data Privacy Forum.
• Devise and agree Data Privacy Operating Standards and other related data privacy policy and procedure documents at a Group level, ensuring alignment with the implementation of personal information processing activities across the Group.

Behavioural Competencies:

• Convincing People
• Developing Expertise
• Developing Strategies
• Directing People
• Embracing Change
• Empowering Individuals
• Establishing Rapport
• Exploring Possibilities
• Interpreting Data
• Making Decisions
• Providing Insights
• Upholding Standards

Technical Competencies:

• Compliance
• Financial Industry Regulatory Framework
• Information Management
• Legal Compliance
• Promote Good Governance, Risk & Control
• Risk Management