Logo for VALR

Senior Data Protection Officer

Role overview

Summary

This role is for a Senior Data Protection Officer at VALR, responsible for maintaining compliance with data protection laws and overseeing privacy risk management. You will work closely with various teams to embed privacy by design and ensure adherence to regulatory requirements in a rapidly evolving crypto environment.

Qualifications

  • At least 8 years’ experience in data privacy and protection and anti-money laundering (AML) compliance.
  • A relevant diploma, degree or equivalent practical experience in Information Security, Law, Compliance or Risk.
  • A recognised privacy certification (e.g. CIPP/E, CIPM) and AML certification (e.g. CAMS, CCAS).
  • Strong knowledge of POPIA, PAIA and GDPR, including Information Regulator requirements.
  • Working knowledge of cybersecurity principles, including authentication, MFA, IAM, encryption, access control, DLP, logging, cloud security and incident response.

Responsibilities

  • Maintain VALR’s POPIA compliance framework and PAIA manual, acting as the contact point for the Information Regulator and data subjects.
  • Inform and advise the business on POPIA and GDPR obligations, monitoring compliance and reporting on privacy risk to executive leadership.
  • Oversee data subject requests and govern cross-border transfers of personal information to third parties.
  • Manage VALR’s DPIA and security risk assessment processes, maintaining risk registers and tracking remediation.

Key facts

Hard skills

Other skills

  • Communication
  • Teamwork
  • Problem Solving

About the company

VALR logo

VALR

  • Fintech: Finance + Technology
  • Scaleup
  • 51–200
VALR bridges the gap between our traditional financial system and the new world of cryptocurrencies. Here's why: There is a socio-financial transition taking place in the world. The organisation of our world into nation-states no longer ministers to the needs of humanity. Humanity yearns to be unified; yet our structures continue to divide us. Money is one of those structures, predominantly defined by the nation-state. The divisions and frictions caused by our antiquated nation-state system have permeated our financial system. These frictions license financial intermediaries to extract financial value from humanity’s cross-border relationships, often at exorbitant rates. “It is expensive to be poor” is truer in the financial industry than any other. We need a new organisational paradigm for society that transcends the nation-state. This in turn will remove some of the frictions in our financial system. But our political systems are mired in vested interests that a deliberate transition by those in power to a system that puts the whole ahead of its constituent parts seems unimaginable, propagating the financial frictions. In the absence of a societal paradigm that eliminates these man-made frictions, cryptocurrencies (and crypto assets in general) have emerged and rise above national borders. Cryptocurrencies hold the promise of being the most frictionless asset class humanity has ever seen. Yet the process to access these assets from our traditional financial system remains difficult. Our mission is to usher in a new financial paradigm. Join us in building a financial system that recognises the oneness of humanity.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

About Us:
Founded in 2018, headquartered in Johannesburg, and backed by leading investors including Pantera Capital, Coinbase Ventures and Fidelity’s F-Prime Capital, VALR is a global crypto exchange offering a comprehensive suite of products—including Spot Trading, Spot Margin, Perpetual Futures, Staking, Lending, Borrowing, OTC services, VALR Invest, Crypto Bundles, and VALR Pay. Licensed by South Africa’s FSCA, with regulatory approval in Europe, VALR serves over 1.7 million registered users and 2,000 corporate and institutional clients worldwide. The exchange is dedicated to advancing a just financial future that upholds human dignity and the unity of mankind. For more information, visit valr.com.

Our Vision:
To establish VALR as a global institution that advances the economic life of human civilisation through a borderless, inclusive, and empowering financial ecosystem.

Our Mission:
To contribute towards a global financial system that upholds justice, fosters human dignity, and reflects the oneness of humanity, by serving the financial needs of individuals, communities, and institutions through innovative financial technologies
  • At least 8 years’ experience in data privacy and protection and anti-money laundering (AML) compliance, with substantial hands-on experience in both, preferably at a crypto asset service provider, fintech or financial institution.
  • A relevant diploma, degree or equivalent practical experience in Information Security, Law, Compliance or Risk.
  • A recognised privacy certification (e.g. CIPP/E, CIPM) and AML certification (e.g. CAMS, CCAS).
  • Strong knowledge of POPIA, PAIA and GDPR, including Information Regulator requirements and the role of Information Officers and Deputy Information Officers.
  • Strong knowledge of AML/CFT frameworks, including the FIC Act, FATF standards for virtual assets and VASPs, and the Travel Rule.
  • Working knowledge of cybersecurity principles, including authentication, MFA, IAM, encryption, access control, DLP, logging, cloud security and incident response.
  • A keen interest in Artificial Intelligence and its privacy and data governance implications.
  • Advantageous: experience across VALR’s jurisdictions – South Africa (FIC Act, FAIS; Information Regulator, FIC, FSCA), Africa (e.g. Kenya’s Data Protection Act and VASP Act), Europe (MiCA, EU AML framework) and the Caribbean (Cayman Islands Data Protection Act, AML Regulations and Virtual Asset (Service Providers) Act; CIMA).
  • Information Officer and DPO duties
    • Maintain VALR’s POPIA compliance framework and PAIA manual, and act as the contact point for the Information Regulator, other supervisory authorities and data subjects.
    • Inform and advise the business and staff on their POPIA and GDPR obligations, monitor compliance, and report on privacy risk and compliance status to executive leadership.
    • Oversee data subject requests, PAIA requests involving personal information and other privacy rights within statutory timeframes.
    • Govern cross-border transfers and disclosures of personal information to third parties.
  • Data protection in AML and crypto operations
    • Ensure KYC, CDD, enhanced due diligence, transaction monitoring and blockchain analytics data is collected, used, shared and retained lawfully under both AML and data protection laws.
    • Govern Travel Rule data exchanged with counterparty VASPs and reconcile AML record-keeping periods with data retention requirements.
    • Support the MLCO/MLRO on STR confidentiality and preventing tipping off.
  • Privacy and security risk management
    • Manage VALR’s DPIA and security risk assessment processes for products, systems, vendors and processing activities, maintain the risk registers and track remediation.
    • Escalate material privacy or security risks where controls are inadequate or remediation is outstanding.
    • Oversee Data Loss Prevention (DLP) controls, segregation of customer personal data between administrative and standard user environments and devices, and separation of privileged, administrative and standard access roles.
  • Application, SaaS and AI approval
    • Manage the approval process for SaaS platforms, AI tools, browser applications, APIs and integrations, reviewing security safeguards, privacy terms, DPAs and sub-processors.
    • Assess AI processing, including whether VALR or personal information may be used for model training, and monitor approved applications for material changes in permissions, data access or risk.
  • Incidents and breaches
    • Assess security incidents for impact on personal information and lead required notifications to the Information Regulator, other supervisory authorities and affected data subjects.
    • Maintain incident and breach records and track corrective actions.
  • Privacy by design and compliance
    • Work with Engineering, Product, Risk and Security to embed privacy by design and by default (data minimisation, access restriction, retention and secure handling), including reviews of architecture, data flows, APIs, databases, cloud services and integrations.
    • Draft and maintain privacy and security policies, standards and procedures, and keep evidence of compliance.
    • Monitor changes in privacy, data protection, cybersecurity and AML law, guidance and standards, and assess their impact on VALR.
    • Deliver practical privacy and cybersecurity advice and training to staff and business teams.
  • Innovative Work Environment
    • Engage with the latest blockchain technologies and tools in a rapidly evolving industry.
    • Work from anywhere with secure, stable internet connectivity, allowing you to create your ideal workspace.
  • Career Development
    • Benefit from an annual professional development allowance alongside scheduled company training sessions to keep you at the forefront of the crypto industry.
  • Competitive Compensation
    • Competitive salaries that align with industry standards.
    • When you contribute to our success, you’ll be rewarded with discretionary bonuses, recognising your impact on VALR’s growth.
    • Receive preferential Tier 5 trading fees on VALR, with no monthly trading volume required.
  • Diversity and Inclusion
    • A commitment to fostering a diverse workforce with initiatives that promote equity and belonging.
  • Wellness
    • Employees are encouraged to strive for coherent and wholesome lives, fulfilling their work, personal, social, physical and spiritual goals to the best of their abilities.
    • Compliance with statutory leave required by individual countries, in addition to flexible leave options.
    • Enjoy lunch on us when working from our Johannesburg Head Office, one of the ways we support wellbeing and connection in the workplace.
  • Impact and Contribution
    • At VALR, we believe in a financial system that recognises the oneness of humanity. Our mission is to break down financial barriers and promote universal values of courage, ethical integrity, and the intrinsic worth of every individual.
    • Engage in initiatives that promote education and awareness about cryptocurrencies, ensuring that everyone has the tools and knowledge to participate in the evolving financial landscape.
  • Dynamic Team Culture
    • Open communication and teamwork across departments, fostering innovation and creativity.
    • Enjoy social gatherings outside of work to strengthen team bonds and boost morale.
  • Global Exposure
    • Work with colleagues from around the world.
    • Exposure to diverse perspectives and practices in the crypto space.
  • Recognition and Rewards
    • Regular acknowledgement of employee accomplishments, fostering a culture of appreciation and motivation.
    • Join us for retreats that blend professional development with team bonding in inspiring locations.
  • Tools for Success
    • Receive a Mac laptop and a discretionary allowance to purchase all the extras needed for a productive home office—yours to keep after three years (terms and conditions apply).

Related jobs

See all Data Protection Officer jobs

Other jobs at VALR