Cyber, Data and Privacy lawyer

St Vincent's Health Australia; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

St Vincent’s Health Australia is seeking an experienced Legal Counsel / Lawyer – Cyber, Data and Privacy in Sydney or Melbourne. You will provide practical legal advice on cyber security, privacy, data governance and technology matters across the national operations, supporting innovation while protecting patient and community information.

You will work with executives, technology teams and clinical colleagues to deliver compliant, practical solutions in a complex regulatory health environment.

Qualifications

• Tertiary qualification in law and admission to practice.
• Experience advising on privacy, data, cyber security or technology matters.
• Ability to explain complex legal issues to non‑legal audiences.

Responsibilities

• Provide strategic and operational advice on privacy, cyber security, data protection and information governance.
• Advise on collection, use, disclosure, storage and protection of personal and health information.
• Support responses to cyber incidents, privacy complaints and data breaches.
• Offer guidance on regulatory notification and reporting obligations for incidents.
• Advise on privacy impact assessments and data protection for new systems and AI.
• Support digital transformation projects including AI, virtual care and cloud services.
• Draft and negotiate privacy, data security and cyber provisions in contracts.
• Collaborate with procurement, technology and operations on IT agreements and data sharing.
• Monitor regulatory developments and translate into practical guidance.
• Develop privacy notices, policies and governance documents.

Skills

Privacy and data protection

Cyber security

Information governance

Technology contracting

AI and emerging technologies

Regulatory compliance

Drafting and negotiation

Education

Law degree

Admission as Solicitor/Barrister (NSW or VIC)

Job description

Job Description

Shape the future of trusted and secure healthcare Lead advice on critical cyber, privacy and data matters: Guide responses to cyber incidents, privacy risks, data breaches and emerging digital health issues across one of Australia’s largest health and aged care organisations. Work at the intersection of law, healthcare and technology: Advise on digital transformation, artificial intelligence, technology procurement, information governance and the responsible use and sharing of sensitive health information. Influence decisions with national impact: Partner with executives, technology leaders, cyber security specialists, clinical teams and senior stakeholders across public hospitals, private hospitals, aged care, virtual care and corporate services.

About St Vincent’s Health Australia

At St Vincent’s Health Australia, we are shaping a future health and aged care system that supports people with life‑changing care, wherever and whoever they are. Founded by the Sisters of Charity in 1857, St Vincent’s is one of Australia’s leading not‑for‑profit health and aged care organisations. Our 30,000 dedicated people provide compassionate care through public and private hospitals, aged care residences, virtual care and services delivered at home across New South Wales, Queensland and Victoria. Our vision is for every person to receive excellent and compassionate care through a better and fairer health and aged care system. Together, we are focused on enhancing our impact, connecting care and transforming the system. Our work is grounded in our values of Compassion, Justice, Integrity and Excellence.

About the Opportunity

We are seeking an experienced Legal Counsel / Lawyer – Cyber, Data and Privacy to join our collaborative National Legal team in Sydney or Melbourne. In this influential role, you will provide practical, timely and solutions‑focused legal advice on cyber security, privacy, data governance and technology‑related matters across St Vincent’s national operations. You will help the organisation navigate a rapidly evolving legal and regulatory environment while enabling innovation and protecting the information entrusted to us by patients, residents, employees and communities. Working closely with senior leaders and subject‑matter experts across legal, technology, cyber security, risk, clinical governance, procurement and operations, you will contribute to strategic initiatives and advise on complex matters where law, data, technology and healthcare intersect. This is an outstanding opportunity to use your specialist legal expertise to support responsible innovation, strengthen organisational resilience and help maintain trust in the delivery of contemporary healthcare.

Your Key Responsibilities

• Provide strategic and operational advice on privacy, cyber security, data protection, information governance and technology‑related legal matters.


• Advise on the collection, use, disclosure, storage, sharing, retention and protection of personal, sensitive and health information.


• Support the organisation’s response to cyber incidents, privacy complaints and suspected or confirmed data breaches.


• Provide advice on regulatory notification and reporting obligations arising from cyber and privacy incidents.


• Advise on privacy impact assessments and data protection considerations associated with new systems, technologies, services and models of care.


• Support digital transformation initiatives, including artificial intelligence, virtual care, data analytics, cloud‑based platforms and emerging healthcare technologies.


• Draft, review and negotiate privacy, data security, confidentiality and cyber‑related provisions in commercial and technology contracts.


• Partner with procurement, technology and operational teams on IT agreements, software and cloud arrangements, vendor engagements and data‑sharing agreements.


• Monitor relevant legislative and regulatory developments and translate complex requirements into clear, practical guidance.


• Develop and review privacy notices, consent materials, policies, procedures, contractual templates and other governance documents.


• Build trusted relationships with executives, divisional leaders, clinicians, technology teams and external stakeholders.


• Collaborate with colleagues across the National Legal team and contribute specialist knowledge to broader corporate, commercial, regulatory and risk matters.

About You

You are a commercially minded lawyer with experience advising on privacy, data, cyber security or technology matters. You combine strong technical legal capability with sound judgement and a practical understanding of organisational risk. You are comfortable working through complex and sensitive issues, including matters that require timely advice, careful stakeholder management and coordination across multiple disciplines. You can communicate technical legal concepts clearly and provide advice that protects the organisation while supporting responsible innovation and effective service delivery. You are naturally collaborative, responsive and solutions‑focused. You enjoy building trusted relationships and are motivated by the opportunity to apply your legal expertise within a complex, purpose‑led organisation whose work directly affects patients, residents and communities.

Key Skills and Qualifications

• You will bring a tertiary qualification in law.


• Admission as a Solicitor or Barrister in the Supreme Court of New South Wales or Victoria.


• Eligibility to hold a New South Wales or Victorian practising certificate without supervision requirements.


• Relevant post‑qualification legal experience gained within a major law firm, specialist practice, government agency or in‑house legal team.


• Demonstrated experience advising on one or more of the following areas:
  
  
  
  • Privacy and data protection
  
  
  • Cyber security and data breaches
  
  
  • Information governance
  
  
  • Technology and digital contracting
  
  
  • Artificial intelligence and emerging technologies
  
  
  • Regulatory compliance
  
  


• The ability to provide timely and practical advice at both strategic and operational levels.


• Sound judgement and the ability to balance legal, regulatory, commercial, clinical and reputational considerations.


• Strong drafting and negotiate skills, particularly in relation to technology, privacy, confidentiality, data‑sharing and cyber security provisions.


• Highly developed written, verbal and interpersonal communication skills.


• The ability to explain complex legal and technical matters to non‑legal audiences.


• Strong planning and organisational skills, including the ability to prioritise urgent matters and meet competing deadlines.


• A self‑directed, flexible and collaborative working style.


• The confidence to work autonomously while contributing positively to a connected national team.


• A commitment to St Vincent’s values and an understanding of the social and ethical considerations associated with health information and healthcare delivery.


• Experience within healthcare, aged care, financial services, government, technology, telecommunications or another highly regulated sector will be highly regarded.

Why Join St Vincent’s?

• Meaningful work with genuine purpose Use your expertise to protect sensitive information, strengthen trust and support the safe delivery of essential health and aged care services.


• A diverse and contemporary legal portfolio Work across cyber incidents, privacy, technology contracting, artificial intelligence, digital health, virtual care, information governance and major transformation initiatives.


• National influence and senior stakeholder exposure Advise across an extensive operating environment and work with executive leaders, cyber security professionals, technology specialists, clinicians, procurement teams, regulators and external advisers.


• Help enable responsible healthcare innovation Support new technologies and models of care by ensuring privacy, cyber security and data protection are considered from design through to implementation.


• Join a connected National Legal team Become part of a collaborative legal function that values professional judgement, knowledge sharing, practical problem‑solving and specialist expertise.


• Grow within a values‑led organisation Build your career in an organisation guided by Compassion, Justice, Integrity and Excellence, with a longstanding commitment to delivering better and fairer care.


• Protect Trust. Enable Innovation. Make a Difference.

Other Information

Closing Date: 18 September 2026 11:59pm

Employment is subject to satisfactory pre‑employment checks, including identification, right‑to‑work, reference and nationally coordinated criminal history checks. The successful applicant must also comply with applicable St Vincent’s Health Australia policies and screening requirements.

St Vincent’s Health Australia welcomes people from all backgrounds and beliefs. We are committed to creating an inclusive workplace where everyone feels respected, valued and empowered to contribute their unique experiences.

Reconciliation Action Plan: At St Vincent's we acknowledge the importance of creating a work environment that is welcoming, safe, equitable and inclusive for Aboriginal and/or Torres Strait Islander Employees. As part of our Commitment to Reconciliation and Closing the Gap in employment related outcomes, we encourage applications from Aboriginal and Torres Strait Islander Peoples. For further information, visit https://www.svha.org.au/about-us/reconciliation or get in contact at [e-mail]