[Hiring] Security, Governance and POPIA Specialist @Centrax Group

Role Description

You make sure the AI solutions Centrax Digital delivers are secure, well governed and compliant with POPIA from the start.

An associate role, engaged per engagement under a statement of work. You baseline client controls, assess the risks that AI tools, agents and integrations introduce, and recommend practical controls that suit the client's size and risk, working within the Govern pillar of CAIF-5.

What You Will Do

• Baseline current security, privacy and AI usage controls, including third-party AI tools in use.
• Assess POPIA compliance for AI use cases, including lawful basis, minimisation, special personal information, cross-border transfer and operator agreements.
• Carry out privacy and AI risk assessments for proposed solutions and pilots.
• Design permission, approval and audit models for AI agents.
• Draft AI acceptable-use principles and model and tool governance.
• Assess AI-specific threats such as prompt injection and data leakage.
• Review AI vendor terms for data use, retention, residency and security.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Law or a related field.
• Minimum 8 years' experience in information security, privacy or IT risk, including at least 3 years of POPIA compliance work in South Africa.
• Privacy impact assessments carried out and controls designed as a result.
• A privacy certification (CIPP/E, CIPM or POPIA-specific) and a security or audit certification (CISSP, CISM, CISA or ISO/IEC 27001) are preferred.
• ISO/IEC 42001 is an advantage.

Requirements

This role gives governance and compliance advice. Legal interpretation sits with the Centrax Head of Legal or the client's own counsel.

Working Arrangements

Remote, with attendance at client workshops as required. Scope, days and daily rate are agreed per engagement. Conflict of interest disclosure is required before appointment.

Employment Equity and POPIA

Centrax Digital is an equal opportunity employer. By applying, you consent to the processing of your personal information for recruitment purposes in accordance with POPIA.

How to Apply

Apply through the Centrax Digital careers portal. Shortlisted candidates will be contacted; if you have not heard from us within four weeks of applying, please consider your application unsuccessful.