Summary
Overview
Work History
Education
Skills
Accomplishments
Certification
Interests
Timeline
Generic
NOSIPHO MBATHA

NOSIPHO MBATHA

Regulatory Compliance, Risk & Legal
Johannesburg

Summary

Detail-oriented Compliance Manager offering 6 years of expertise in Compliance,Risk and Legal . Advanced knowledge of regulatory compliance with proven track record of partnering with business to identify vulnerabilities and create corrective actions. Collaborative and team-oriented with excellent communication and interpersonal skills to foster strategic partnerships and promote company reputation.

Overview

6
6
years of professional experience
16
16
years of post-secondary education
7
7
Certificates
3
3
Languages

Work History

Regulatory Compliance Manager

BANKSERVAFRICA
johannesburg
06.2022 - Current
  • The core focus of this role is to ensure that the organisation implements an effective compliance framework and processes and complies with all applicable laws and binding regulations (specifically, the PASA and SARB requirements), and monitors compliance to the regulatory universe, standards and codes
  • This role also manages information and data within BankservAfrica in compliance with the POPIA, PAIA Acts and other related legislation.
  • Delivered subject matter expertise for internal and external customers on compliance best practices and quality control.
  • Reviewed documents, files, transcripts and other records to assess compliance and potential risk.
  • Managed compliance efforts, reporting and audits.
  • Prepared and presented comprehensive reports to upper management and audit team, covering issues and recommendations.
  • Developed and delivered training programs to inform new and current employees about compliance issues.
  • Maintained effective working relationships with regulatory authorities, suppliers and customers.
  • Evaluated customer complaints, processes and all other aspects of operations to assess compliance.
  • Advised division leaders of regulatory risks in business processed and provided recommendations for improvement.
  • Played instrumental role in company-wide risk assessment efforts, supporting enhancements in business processes and controls.
  • Structured programs, produced working documentation and implemented best practices.
  • Formulated detailed recommendations based on audit findings to support annual planning and definition of goals.
  • Drove optimization of regulatory risks management, control testing and process improvements.
  • Defined and developed policies and procedures for consumer reporting and privacy practices.
  • Kept new and modified products and services in conformance with security and compliance regulations.

Regulatory Compliance Officer

INDUSTRIAL DEVELOPMENT CORPORATION
Sandton, Johannesburg
10.2019 - 05.2022
  • In this role I’m responsible for providing compliance strategic direction and provide advisory to the business
  • I’m also trusted with implementation of the Data Privacy
  • Program/ POPIA framework, Responsible for full implementation of the Compliance Annual Coverage Plan in line with the approved IDC Regulatory Universe (including the incorporation of the risk- based methodology and the Combined Assurance Model as a base for performing compliance reviews)
  • Regulatory Universe includes: PFMA, POPIA, FICA, KING IV,
  • Industrial Development Corporation Act (IDC Act) read with the Companies Act, Use of 4
  • Official Languages Act; Children’s Act; Mineral and Petroleum Resources Development
  • Act (MPRDA); BBEE Act; OHS; Copyright Act; Carbon Tax Act; PRECCA, Basic
  • Conditions of Employment Act; Competition Act; Electronic and Communications
  • Transactions Act; Employment Equity Act; Labour Relations Act; UIFCA, EXCON;
  • Insolvency Act; Compensation for occupational Injuries Act, FAIS, COFI Bill
  • Manage the logging, tracking and status reporting of government information, and privacy requests and provide administrative support to the department as required to support the smooth running of the Department Design templates and coming up with new ways of reporting; regulatory developments, compliance statuses and monitoring reports to EXCO
  • Conduct Compliance Training Infrastructure and Awareness of all the High Risk legislations in the Regulatory Universe
  • Responsible for Advisory and tracking of new regulatory requirements for the whole organization
  • Research on International Regulatory developments and New Business Ventures
  • Ensure continual monitoring of regulatory evolutions that impact the business Support the business with implementing and managing regulatory projects Participate in defining the Compliance control framework
  • Ensure consistent deployment of Compliance policies and methodologies according to relevant regulations eg FICA, POPIA and BCEA
  • Manage the regulatory updates and regulatory advisory in a confidential manner Define procedures and control plans for the application of statutory obligations Assist the business with Compliance decision process and/or provide advice on issues according to System and Procedures processes Contribute to Compliance governance, execution, training and awareness planning Develop, lead or participate in staff Compliance training Support business development through reviewing and validating the Compliance of new business, services or operations 5 Provide support and guidance to the Business teams on Compliance matters, communicating the rules applicable to them and ensuring procedures are implemented Manages monitoring of legislations; develop Risk Matrix and assist business with effectiveness of controls
  • Conduct Client onsite inspections in terms of FICA
  • Initiate and participate in projects to improve Compliance culture
  • Leading the implementation of the POPIA programme for the whole organisation and ensure that the POPIA framework is successfully implemented
  • Leading the implementation of the training and awareness of the POPIA program (as of July 2021 I have trained 620 employees)
  • Ensuring that third parties comply with data privacy laws and reviewing of cross border flow of information
  • Conducting due diligence on the flow of information from a GDPR and POPIA perspective
  • Liaising with the Info Regulator on issues of POPIA prio Authorisations.

Legal & Regulatory Compliance Analyst

FIRST NATIONAL BANK
Sandton, Johannesburg
10.2018 - 09.2019
  • In this role I was responsible for ensuring that the company and its staff adhere to all relevant legal standards and in-house policies
  • I was also involved in complaints resolution
  • Legal Complaints resolution
  • Liaising with the ombudsman
  • Drafting responses and legal advice
  • Reviewed Supplier Agreements and Customer agreements
  • Compliance Research, implementation, and managing the areas of banking regulations and laws, banking policies and procedures are in line with the following laws : FAIS, POPIA,
  • NCA,CPA, Electronic and Communications Transactions Act, Basic conditions of Employment Act, Banks Act, Employment Equity Act, Competition Act, RICA
  • Ensures products, services, and operations are in compliance with all legal and regulatory requirements: monitors, researches, and analyzes First Rand policies regulations, court decisions and Banking Ombudsman standards
  • Maintains liaison with internal group stakeholders
  • Demonstrated experience in interpreting and applying the Privacy and Personal Information Protection Act of 2013
  • Provided advise to call-center team leaders in line with FAIS in compliance in the sales process of investments, funeral covers, insurance and credit products Conduct Compliance Training Infrastructure and Awareness for new agents
  • Training focused on FAIS, POPIA and NCA
  • Investigate related to possible non-compliance or to ensure compliance is taking place
  • Conduct monitoring and compile reports
  • Cultivate and manage objective working relationships with a variety of stakeholders
  • Build and sustain collaborative working relationships with relevant peers and stakeholders in order to achieve productivity synergies
  • Create reports summarizing major findings, issues and outstanding remediation items, identify risks and controls
  • Performing audit testing and completing documentation of planning, testing and findings made in line with the First Rand Compliance methodology
  • Ongoing monitoring of business compliance to the control frameworks, reporting and escalation of incidents of non-compliance including follow up on implementation of agreed corrective measures
  • Provide support to stakeholders in relation to the execution of the relevant legislation, frameworks, processes and tools
  • Provide input to business on compliance related matters to assist in informed decision making
  • Provides an advisory service and consults with business in order to recommend controls and processes to ensure legislative compliance for new products and services
  • Assisting new business development with POPIA compliance and part of the Privacy steering committee.

Legal and Compliance Officer

TOYOTA TSHUSHO AFRICA PTY LTD
Sandton, Johannesburg
05.2016 - 09.2018
  • In this role I was responsible for identifying potential areas of compliance and legal vulnerability then developing corrective action plans to rectify them.
  • This was looking into different jurisdictions in the African Continent.
  • Draw up contracts with Suppliers/ Business Partners/ Debtors - Distribution Agreements - Transport Agreements - NDA - Conversion Agreements - Tri-party Agreements - Sales and Purchase Agreements - Business Agreements - Distribution Agreements - Cross border Agreements Negotiate contracts with Suppliers/ Business Partners/ Debtors Open the Vendors in SAP Store the Original signed agreement Increase Credit Limits when needed Manage Supplier Master Data Handle Internal Legal Cases/ HR Disputes Handled litigations preparation documents for Counsel
  • Compliance Monitor internal Compliance to Head office in Japan and company policies Conduct monitoring and compile reports on the relevant automotive legislations, companies Act, Basic Conditions of Employment Act and Employment Equity
  • Manage reporting on internal compliance of Workplace Safety Act such as
  • Occupational Health and Safety Act and COIDA
  • Ensures products, services, and operations are in compliance with all legal and regulatory requirements to local legislation and foreign jurisdictions such as Zambia, Mauritius and Zimbabwe
  • Ensures record keeping of all required documents such as issue logs, monitoring reports and statutory reports
  • Conduct regulatory tracking and impact assessments for new strategies including assessment of the Competition Act
  • Regulatory and Enterprise Risk Management Identify Regulatory/Litigation/ Financial Company Risks Record Regulatory/ Litigation/Financial Company Risks Decide on risk prevention activities to manage Company risks Monitor risk prevention activities
  • Identified potential areas of compliance vulnerability and risk to develop and implement corrective action plans.
  • Reviewed company forms, marketing materials and communication procedures for compliance with applicable laws and guidelines.

Education

LLB, Bachelor of Laws -

University of KwaZulu Natal
02.2011 - 11.2015

Post Grad in Compliance, Risk & Governance -

University of The Witwatersrand
01.2017 - 09.2017

Masters of Laws (LLM) - International Economic Laws

University of South Africa
03.2018 - Current

Affiliate Member -

Compliance Institute of Southern Africa
05.2017 - Current

Post grad Cert, Competition Law - Competition Law

University of The Witwatersrand
02.2022 - 06.2022

Skills

    Legal ,Compliance & Risk Skills

undefined

Accomplishments

  • Elected to be a Non-Executive Director for 3 IDC subsidiaries- Last appointment was May 2021
  • Contributed to the Youth Civil Society written submission for the African Peer
  • Review Mechanism (APRM) process in South Africa – April 2021
  • Completed a POPIA training for the whole of IDC (about 6000 employees) – May2021
  • Collaborated with teams in the development of a POPIA project (2021-2022).

Certification

POPIA certification

Interests

Kaizen, building a compliance culture, governance, simplifying concepts , innovation & leadership

Timeline

Regulatory Compliance Manager

BANKSERVAFRICA
06.2022 - Current

Post grad Cert, Competition Law - Competition Law

University of The Witwatersrand
02.2022 - 06.2022

Regulatory Compliance Officer

INDUSTRIAL DEVELOPMENT CORPORATION
10.2019 - 05.2022

Legal & Regulatory Compliance Analyst

FIRST NATIONAL BANK
10.2018 - 09.2019

Masters of Laws (LLM) - International Economic Laws

University of South Africa
03.2018 - Current

Affiliate Member -

Compliance Institute of Southern Africa
05.2017 - Current

Post Grad in Compliance, Risk & Governance -

University of The Witwatersrand
01.2017 - 09.2017

Legal and Compliance Officer

TOYOTA TSHUSHO AFRICA PTY LTD
05.2016 - 09.2018

LLB, Bachelor of Laws -

University of KwaZulu Natal
02.2011 - 11.2015

POPIA certification

Being a Director

Creating a culture of Privacy

Privacy in a new world of work

Speaking confidently & effectively

Understanding and prioritizing data privacy

PowerPoint

NOSIPHO MBATHARegulatory Compliance, Risk & Legal