Senior Specialist OPIA / PDPR

About the position

• To identify all processes, products, assets and third parties within a business area (global records or local records) where there is processing of personal information so that risk assessments can be performed and appropriate control measures implemented so that the organization can become compliant to applicable privacy legislations.
• To document processing activities according to their process/product hierarchies (process or product catalogues) in oder to ensure that the correct data flow maps/diagrams can be created and kept up to date within the Record of Processing Activities (RoPA).
• To conduct assessments of existing organisational processes, products, services, Apps and sytems.
• To conduct re-assessments of high and medium risk assessments of processing activities in order to re-evaluate the risk levels and adequacy /effectiveness of controls.

To conduct privacy impact assessments (Privacy by Design & Assurance) of new processes, products and systems to be launched by Vodacom or changes to existing processes, products or assets to ensure that all critical and high new business risks have been identified and mitigated before any product, service, promotion or campaign is launched

Key accountabilities and decision ownership:

• Process Mapping

Identify primary record according to PRM reference model and then link process or sub-process to primary record accordingly.
Product catalogue - ensure that there is an appropriate product catalogue with standard references and ensure that it is kept up to date per each business area.

• High & Medium Risk Processing Activities Re-assessments

Identify and conduct re-assessments of processes, products & assets every three years or when something significant changes. Up-to-date processing activity records information is maintained in the Personal Data Processing Register (PDPR).

• Assessment Quality Assurance

Ensure that all Organisational Privacy Impact Assessments (OPIA) and Privacy by Design (PDA) assessments performed meets the quality criteria in their respective areas.

• Data Flow Map

Ensure that every business area where there is personal information processing keeps up to date data flow diagrams/maps that shows standard reference numbers (PRM reference model) for personal information flowing from or to other business areas.

• Assets Risk Assessments

Key performance indicators:

• Maintenance of a comprehensive and updated PDPR in areas of responsibility. The records in the PDPR must meet the quality requirements set.
• Functional data flow diagrams/maps that take into consideration process/product hierarchy and relationships

A comprehensive re-assessment plan for high & medium risk processing activities. The plan must be implemented successfully in each respective year.

Must have technical / professional qualifications:

• Engineering/Science/IT/Commercial/Business degree or NQF 7 equivalent

• Additional professional relevant certification will be an advantage.

• A minimum of 5 years relevant experience essential, with exposure to the following:

• Risk and compliance
• Business process related work
• Ability to build relationships and influence at all levels of Vodacom
• Exceptional organisational and communication skills

Desired Skills:

• Process Management
• Business Analyst
• Risk Analysis
• Compliance
• Process modelling

Desired Work Experience:

• 5 to 10 years