Regulatory Compliance Analyst

Your day at NTT DATA

• This role is responsible for independently managing telecommunications regulatory affairs and data privacy compliance across the business. The successful candidate will oversee regulatory compliance obligations, monitor and interpret regulatory developments, conduct risk assessments, evaluate internal controls, and support audits to ensure compliance with applicable laws and industry requirements. They will also serve as a key point of contact for regulatory authorities and stakeholders.
• From a data privacy perspective, the role will provide advice on compliance with data protection laws and company policies, support privacy governance initiatives, review and negotiate data processing agreements, conduct privacy impact assessments and data mapping exercises, manage data breaches, coordinate audits, and act as the primary contact for privacy-related queries across the business.

Key responsibilities:

• Provide expert advice and day-to-day operational support on regulatory matters impacting the telecommunications industry, including data privacy, competition law, and trademark law.
• Manage day-to-day telecommunications regulatory affairs activities,
• including regulatory queries, routine regulatory filings, compliance
• calendars, regulatory submissions, number allocation matters, ISPA
• queries, and interactions with regulatory authorities.
• Ensure that all necessary regulatory licences, permits, and certifications are processed, maintained, and renewed in a timely manner.
• Engage internal stakeholders and draft regulatory submissions in response to requests from local and regional regulatory authorities.
• Draft internal regulatory opinions as and when requested by internal
• stakeholders with a view to mitigating regulatory and business risks.
• Assist internal stakeholders with local and, where applicable, regional
• quarterly and annual regulatory submissions, such as the computation of annual licence fees, number allocation applications, and regulatory compliance reports.
• Maintain stakeholder relationships with various local and regional
• regulatory authorities and policymakers and advocate for the business's strategic position in alignment with business objectives, including attending to ISPA queries and online takedown notices.
• Monitor legal and regulatory changes to ensure that appropriate
• interventions are defined and communicated to impacted internal
• stakeholders.
• Investigate allegations of regulatory non-compliance to ensure that
• appropriate measures are taken to prevent recurrence.
• Identify, classify, and record regulatory risks in the Risk Register by
• determining the root causes and ensuring that reported risks are resolved through the proactive implementation of appropriate remedial actions.
• Work with external counsel as and when required.
• Provide expert advice on data privacy in compliance with applicable data privacy laws such as POPIA and the GDPR.
• Ensure that the organization complies with data privacy laws by
• implementing and maintaining the data privacy governance framework.
• Review, negotiate, and advise on data processing agreements and other privacy-related contractual provisions.
• Review, complete, and advise on data privacy assessments, due diligence assessments, data mapping exercises, and data processing agreements.
• Attend to data breaches and ensure that data breach notifications are submitted timeously to relevant regulators and other impacted stakeholders, where required.
• Serve as the point of contact for data privacy queries, including coordinating and conducting data privacy audits.
• Advise the business on all aspects of intellectual property, including trademark protection, brand protection, and enforcement activities.
• Brief external attorneys to ensure the timely renewal of trademarks before their expiry.
• Maintain the business' trademark schedule.
• Attend to global trademark monitoring alerts and recommend appropriate actions to protect the organization's intellectual property rights.
• Attend to global trademark monitoring alerts.

Academic qualifications and certifications:

• Bachelor of Law (LLB)
• Relevant privacy certifications include CIPP/E, CIPP/A, CIPM or an equivalent recognised data protection/privacy certification is advantageous

Required experience:

• Minimum of 4 years relevant experience.
• Seasoned knowledge of relevant laws and regulations, including data protection laws, and industry-specific regulations.
• Seasoned experience in compliance, legal, or regulatory roles within the IT / Telecoms industry
• Seasoned experience with compliance auditing, reporting, and documentation.
• Seasoned experience working within a global matrixed organization, preferably within the IT services industry.