Data Governance and Privacy Manager

About the role

Old Mutual is looking for a Data Governance and Privacy Manager in Johannesburg. The role establishes, leads and maintains independent second-line oversight of data governance, data risk, data quality and privacy compliance across the organisation, ensuring data is managed as a strategic and regulatory-compliant asset. It challenges first-line operational teams (IT, Data Architecture, Engineering, Underwriting, Claims and Operations) while aligning with South African regulatory requirements such as POPIA.

Key responsibilities

• Develop, maintain and embed the Data Risk Management Framework, policy and standards, and define the data risk taxonomy
• Propose data risk appetite statements, key risk indicators and tolerance thresholds for risk committee approval
• Review and challenge first-line risk and control self-assessments, and oversee Data Protection Impact Assessments
• Monitor data quality issues, data lineage, traceability, reconciliation and data migration risks
• Oversee data protection and privacy risks, including access governance, cross-border transfers and outsourced processing
• Assess critical data assets, backup integrity and recovery testing, and risks from legacy systems and shadow data stores
• Provide independent oversight of third-party, outsourcing and cloud data risks
• Track data risk incidents and breaches, validate remediation plans and escalate unresolved risks

Required profile

• Bachelor's degree in information systems, data management, computer science, risk management, information security, statistics, business or a related discipline
• At least 6-8 years of experience in data risk, IT risk, information governance, data governance, information security or technology risk
• A relevant postgraduate qualification in risk management, information systems or data governance is advantageous
• Certifications such as CISA, CRISC, CDMP, CIPP/E or CIPM are advantageous

The recruitment process includes a TA interview, panel interviews with senior leadership, technical and psychometric assessments, vetting and internal verification. Applications close on 11 November 2026.