Position overview
The position is located in the Information and Technologies Branch (ITB) Privacy and Safer Technologies (PST) directorate and is within the Privacy Team.
The Privacy Team provides high level privacy advice to corporate and regional business units, as well as schools regarding the department’s statutory privacy compliance obligations. The team also provides routine privacy advice regarding risk, and mitigation strategies particularly relating to corporate and enterprise products, and assesses policy, procedure, processes, initiatives and projects as required in consultation with various other compliance activities within the department.
The position reports to the Director/Manager, Privacy and will work as part of the privacy team which is comprised of a Manager, Principal Privacy Officer, two Senior Privacy Officers and a Privacy Officer.

Key tasks / responsibilities:

• Partner with ICT enabled, and non-ICT enabled projects, and business units to review privacy impact assessments for project and business unit initiatives. Use sustainable and defensible processes for identifying potential risk events and to provide advice and recommendations to be performed to mitigate the risk and to reduce the potential impact on the business.
• Contribute to the management, investigation and reporting of privacy complaints and privacy breaches within the department in accordance with the department’s statutory compliance obligations. Liaise as necessary with identified business units regarding the circumstances regarding the complaint or breach and ultimately provide a report to the complainant/business unit regarding the outcome of such investigations and any remedial activities to be undertaken.
• Undertake other privacy related activities as requested by Director/Manager of the department’s privacy function.

Capabilities / Desirable attributes:

• Extensive working knowledge of state and federal privacy legislation, and demonstrated knowledge in the delivery of privacy management better practice.
• Experience identifying privacy risk and privacy risk assessment, development of risk mitigation strategies.
• Experience managing client complaints and expectations in a statutory compliance environment
• Demonstrated capacity to work effectively under pressure, handle competing priorities, analysing complex issues and providing high level advice and meeting externally imposed deadlines.
• Demonstrated highly developed written communication skills including the preparation of briefings, submissions and reports on complex issues and develop communications materials for a range of channels to support good governance and decision making.
• Knowledge or ability to rapidly acquire knowledge of proposed changes to Queensland Privacy legislation

Mandatory requirements:

• Demonstrated experience in undertaking complex Privacy Impact Assessments (PIA) working with Information technology business areas.
• Minimum 3 years’ experience investigating and managing privacy complaints and privacy breaches under the Commonwealth or Queensland privacy framework.
• Demonstrated experience in providing high level privacy advice to senior management.
• Extensive knowledge or ability to rapidly acquire knowledge of the Commonwealth and Queensland Privacy legislation and framework.

Please note for all Australian based contract and temporary roles only, the pay rate is inclusive of mandatory 25% casual loading. This excludes permanent and fixed term roles.