Position Overview

This position is part of the Privacy and Safer Technologies directorate within the privacy team. The team provides high-level privacy advice to various business units, ensuring statutory privacy compliance obligations are met. Additionally, the team advises on risk mitigation strategies and assesses policies, procedures, and initiatives in collaboration with other compliance activities.

Key Responsibilities

• Manage, investigate, and report on privacy complaints and breaches in accordance with statutory compliance obligations. Liaise with relevant business units and provide reports on investigation outcomes and remedial actions.
• Coordinate with stakeholders, including Information Custodians, Regional Directors, and senior executives, to ensure privacy management practices align with legislation and industry best practices.
• Partner with ICT and non-ICT projects to govern privacy impact assessments, identifying potential risks, quantifying probabilities, and implementing mitigation strategies.
• Support additional privacy-related activities as directed by the Privacy Manager or Director.

Capabilities / Desirable Attributes

• Extensive knowledge of state and federal privacy legislation and best practices in privacy management.
• Experience in identifying privacy risks and developing mitigation strategies.
• Proven ability to manage privacy-related complaints and expectations in a regulatory environment.
• Strong analytical skills to assess complex privacy issues and provide high-level advice under time constraints.
• Highly developed written communication skills for preparing reports, briefings, and communications.
• Knowledge of or ability to quickly acquire knowledge of proposed changes to privacy legislation.

Mandatory Requirements

• Minimum of 3 years' experience in investigating and managing privacy complaints and breaches under the Commonwealth or state privacy framework.
• Demonstrated experience in providing high-level privacy advice to senior management.
• Experience conducting complex Privacy Impact Assessments (PIA), particularly in ICT-related business areas.
• Extensive knowledge of or ability to rapidly acquire knowledge of privacy legislation and frameworks.