Cybersecurity, Data and Privacy Lawyer

Jobtailor

Sydney

On-site

AUD 140,000 - 210,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

St Vincent’s Health Australia is seeking an experienced lawyer to provide strategic and operational legal advice on privacy, cyber security, data protection and information governance within a healthcare context. You will draft and negotiate technology contracts, support AI and cloud initiatives, and guide regulatory reporting and incident response.

The role requires NSW/Victoria practising certificates, post-qualification experience in privacy and data protection, and the ability to translate

Qualifications

Qualified lawyer with a tertiary law degree and admission to the NSW or Victorian bar or solicitor practising certificate.
Post‑qualification experience in privacy, data protection, cyber security, data breaches or information governance.
Experience with regulatory compliance in highly regulated sectors (healthcare preferred).
Ability to provide timely, practical advice at strategic and operational levels.
Strong drafting and negotiation skills in technology, privacy and data‑sharing provisions.
Excellent written, verbal and interpersonal communication; able to explain complex matters to non‑legal audiences.

Responsibilities

Provide strategic and operational legal advice on privacy, cyber security and data protection.
Advise on collection, use, storage, sharing and retention of personal information and health data.
Support incident responses, privacy complaints and data breaches; assist with regulatory notifications.
Draft, review and negotiate privacy, data security and technology contracts.
Collaborate with procurement and technology teams on IT agreements and data‑sharing.
Monitor regulatory developments and translate into practical guidance.

Skills

Privacy & Data Protection

Cyber Security

Data Analytics

Regulatory Compliance

Healthcare Sector Experience

Education

Tertiary law degree

Solicitor/Barrister admission (NSW/Victoria)

Practising certificate eligibility

Tools

Cloud Platforms

Data-Sharing Agreements

Technology Contracts

Privacy Notices

Governance Documents

Job description

Provide strategic and operational legal advice on privacy, cyber security, data protection, information governance and technology matters
Advise on the collection, use, disclosure, storage, sharing, retention and protection of personal, sensitive and health information
Support responses to cyber incidents, privacy complaints and suspected or confirmed data breaches
Advise on regulatory notification and reporting obligations arising from cyber and privacy incidents
Advise on privacy impact assessments and data protection for new systems, technologies, services and models of care
Support digital transformation initiatives involving artificial intelligence, virtual care, data analytics, cloud platforms and emerging healthcare technologies
Draft, review and negotiate privacy, data security, confidentiality and cyber-related provisions in commercial and technology contracts
Partner with procurement, technology and operational teams on IT agreements, software and cloud arrangements, vendor engagements and data-sharing agreements
Monitor legislative and regulatory developments and translate requirements into practical guidance
Develop and review privacy notices, consent materials, policies, procedures, contractual templates and governance documents
Build relationships with executives, divisional leaders, clinicians, technology teams and external stakeholders
Collaborate with the National Legal team and contribute specialist knowledge to corporate, commercial, regulatory and risk matters

Requirements

Tertiary qualification in law
Admission as a Solicitor or Barrister in the Supreme Court of New South Wales or Victoria
Eligibility to hold a New South Wales or Victorian practising certificate without supervision requirements
Relevant post-qualification legal experience gained within a major law firm, specialist practice, government agency or in-house legal team
Demonstrated experience in privacy and data protection, cyber security and data breaches, information governance, technology and digital contracting, artificial intelligence and emerging technologies, or regulatory compliance
Ability to provide timely and practical advice at strategic and operational levels
Sound judgement balancing legal, regulatory, commercial, clinical and reputational considerations
Strong drafting and negotiation skills relating to technology, privacy, confidentiality, data-sharing and cyber security provisions
Highly developed written, verbal and interpersonal communication skills
Ability to explain complex legal and technical matters to non-legal audiences
Strong planning and organisational skills, including prioritising urgent matters and meeting competing deadlines
Self-directed, flexible and collaborative working style
Confidence working autonomously while contributing to a connected national team
Commitment to St Vincent’s values and understanding of social and ethical considerations associated with health information and healthcare delivery
Experience in healthcare, aged care, financial services, government, technology, telecommunications or another highly regulated sector highly regarded
Satisfactory identification, right-to-work, reference and nationally coordinated criminal history checks
Compliance with applicable St Vincent’s Health Australia policies and screening requirements

Core Competencies

Demonstrates expertise in providing strategic and operational legal advice on privacy, cyber security, and data protection, with strong drafting and negotiation skills in technology and data-sharing agreements. Capable of navigating complex regulatory environments and translating legal requirements into practical guidance.

Highest-signal resume keywords