Enterprise Compliance Lead

Morgan Mckinley; Sydney; On-site; AUD 120,000 - 150,000; Full time

Job summary

Morgan McKinley is seeking an experienced Senior Privacy & Compliance Advisor for an initial 6-month contract in Sydney, NSW. The role focuses on privacy, regulatory compliance, risk management, and assurance within a highly regulated environment.

Key duties include conducting PIAs, maintaining obligation registers, and providing specialist privacy advice to strengthen first-line controls. Collaboration with risk teams and governance forums is essential for successful outcomes.

Qualifications

• Experience in privacy compliance and risk management within regulated environments.
• Strong knowledge of the Australian Privacy Act and APPs.
• Experience conducting Privacy Impact Assessments (PIAs).

Responsibilities

• Provide SME guidance on privacy compliance and risk management.
• Conduct Privacy Impact Assessments end-to-end with stakeholder engagement and reporting.
• Maintain and review regulatory obligation and controls registers.
• Support monitoring, assurance and control testing in second line.
• Review control effectiveness and advise risk owners.
• Identify areas of compliance exposure and remediation opportunities.
• Research new legislation and advise business on impact.
• Prepare governance reports for senior management and committees.
• Contribute to enterprise compliance framework improvements.

Skills

Privacy compliance

Risk management

PIA

Regulatory knowledge

Stakeholder engagement

Policy interpretation

Reporting

Tools

Regulatory registers

Job description

Enterprise Compliance Lead Morgan McKinley•Sydney, NSW, AU

About the job

Our client is seeking an experienced Senior Privacy & Compliance Advisor to join their Enterprise Risk & Compliance function on an initial 6-month contract.

This is an excellent opportunity for a privacy and compliance professional with strong experience across regulatory compliance, risk frameworks, controls, assurance and Privacy Impact Assessments to play a key role within a highly regulated organisation.

About the Role

Reporting to the Enterprise Compliance Manager, you will provide specialist advice and support to ensure the organisation meets its legal, regulatory and internal policy obligations.

You will act as a Privacy Compliance SME, partnering closely with the business and risk teams to strengthen first-line controls, support second-line monitoring and assurance activities, and provide independent challenge and advice around the effectiveness of the compliance and risk environment.

A key focus of the role will be conducting Privacy Impact Assessments (PIAs), maintaining regulatory obligations and controls, supporting compliance monitoring and assurance, and providing advice on privacy-related risks, incidents and regulatory requirements.

Key Responsibilities

• Provide subject matter expertise across Privacy Compliance, including the Privacy Act, Australian Privacy Principles and related regulatory obligations.
• Conduct Privacy Impact Assessments (PIAs) from end-to-end, including stakeholder engagement, analysis, advice and reporting.
• Maintain and review regulatory obligation and controls registers, ensuring key compliance obligations are accurately captured and appropriately managed.
• Support second-line compliance monitoring, assurance and control testing activities.
• Review the effectiveness of controls and provide constructive challenge and advice to risk and control owners.
• Identify areas of compliance exposure, ineffective controls and opportunities for remediation.
• Support compliance risk assessments and the development of appropriate risk and compliance metrics.
• Research and interpret new and emerging legislation, regulations and external requirements and advise the business on their impact.
• Partner with Risk Partners and first-line risk teams on compliance matters across the organisation.
• Provide specialist advice on privacy incidents, breaches and regulatory reporting where required.
• Support investigations into reportable breaches and incidents.
• Contribute to the ongoing development and improvement of the enterprise compliance management framework.
• Assist with the development and implementation of second-line monitoring and assurance plans.
• Prepare high-quality compliance, risk and assurance reports for senior management and relevant governance committees.
• Support compliance training and initiatives designed to strengthen the organisation's compliance culture.

About You

You will be an experienced privacy, risk or compliance professional with a strong understanding of operating within a regulated environment.

You will ideally bring:

• Proven experience in privacy compliance and risk management.
• Strong knowledge of the Australian Privacy Act and Australian Privacy Principles (APPs).
• Demonstrated experience conducting Privacy Impact Assessments.
• Experience working within a second-line risk, compliance or assurance function.
• Strong understanding of risk and control frameworks, compliance monitoring and assurance.
• Experience reviewing and testing controls and identifying remediation opportunities.
• Strong regulatory research, interpretation and advisory capabilities.
• Excellent stakeholder engagement and influencing skills, with the ability to constructively challenge business and risk owners.
• Strong written communication and report-writing skills.
• Experience working with regulatory obligations registers, risk registers or similar governance frameworks.
• Experience within a highly regulated industry such as insurance, financial services, government, healthcare or utilities will be highly regarded.

Why Apply?

This is a great opportunity to join a mature Enterprise Risk & Compliance function and make a tangible impact across privacy, regulatory compliance, risk and assurance.

You will have the opportunity to work closely with senior stakeholders and contribute to the ongoing development of the organisation's enterprise-wide compliance framework.

Own the compliance governance framework.Expert understanding of AFSL obligations and ASIC.We are exclusively partnering with a highly regarded Australian boutique investment manager to appoint a Di