Enterprise Compliance Lead - Privacy

insurance & care NSW; Sydney; Hybrid; AUD 131,000 - 177,000; Full time

Benefits offered by this job

Gym membership subsidy

Flu vaccinations

Health check programs

Leave loading 17.5%

icare day

Learning & development

Awards program

Employee assistance

Job summary

icare is seeking an Enterprise Compliance Lead – Privacy in Sydney to partner with the Enterprise Compliance Manager and strengthen the organisation's privacy risk framework. The role focuses on documenting controls, supporting second-line monitoring, and delivering high-quality PIAs and regulatory reporting.

With 5-7 years in compliance and a background in privacy and regulatory regimes, you will advise stakeholders, lead initiatives, and help drive a culture of accountability and governance

Qualifications

• 5-7 years' experience in Compliance, Risk, Assurance or related governance.
• Tertiary qualifications in Business, Commerce, Finance, Law or related discipline.
• Experience in highly regulated environments, with government/insurance/financial services exposure.
• Strong ability to analyze, interpret and report on compliance obligations and risk management strategies.

Responsibilities

• Act as the subject matter expert for Privacy Compliance across the organisation.
• Lead ongoing enhancement of privacy compliance frameworks, policies and registers.
• Conduct end-to-end Privacy Impact Assessments (PIAs) with stakeholders.
• Manage data breaches by providing assessments and expert advice.
• Partner with leaders to strengthen compliance practices and embed risk management.
• Support compliance assurance activities and reviews of controls and obligations.
• Review risk and control environments to drive continuous improvement.
• Provide guidance on privacy incidents, investigations and regulatory obligations.

Skills

Privacy Compliance

Regulatory compliance

Stakeholder engagement

Data protection

Education

Business/Commerce/Law degree

Job description

Sydney

Help ensure icare meets its legal, regulatory and internal policy obligations through the implementation of the Compliance Management Policy

• Leverage your subject matter expertise and experience in managing privacy risk
• Permanent full-time position, Sydney CBD location
• Hybrid working environment, salary from $154,231 + super

About the Role

In this role, you'll partner closely with the Enterprise Compliance Manager to help shape and strengthen icare's compliance and risk management environment. You'll play a key role in ensuring we meet our legal, regulatory and internal obligations while supporting the delivery of enterprise-wide compliance and risk frameworks.

Working collaboratively across the business, you'll help document and enhance first-line controls, support second-line monitoring and assurance activities, and assess the effectiveness of compliance frameworks through reviews, insights and reporting. Your expertise will directly influence how we manage privacy risk and drive a strong culture of accountability and governance.

Drawing on your experience in privacy and any of regulatory compliance, technology and/or people-related risk, you'll provide trusted advice to stakeholders, lead key compliance initiatives, and help the business navigate an evolving privacy risk landscape with confidence.

Benefits

• A corporate wellbeing program with subsidised gym membership, free flu vaccinations and health check programs
• 17.5% annual leave loading
• icare day – access to an extra day’s leave
• Comprehensive learning and development supportaligned to icare’s Core Capabilities.
• Our People Awards - On-the-spot Recognition, Quarterly Values Awards & Our People Annual Awards
• Access to our Employee Assistance Program

Duties

It’s an exciting time at icare where no two days are the same; as an Enterprise Compliance Lead – Privacy you will:

• Act as the subject matter expert for Privacy Compliance, providing trusted advice and guidance across the organisation to ensure compliance with legislative, regulatory and internal policy requirements.
• Lead the ongoing enhancement and maintenance of privacy compliance frameworks, policies and obligation registers, ensuring alignment with industry best practice and evolving regulatory requirements.
• Conduct end-to-end Privacy Impact Assessments (PIAs), partnering with stakeholders across the business to identify risks, recommend practical solutions and deliver high-quality assessment reports.
• Manage eligible or suspected eligible data breaches by providing assessments and expert advice and working in collaboration with the Principal Privacy Officer to ensure that regulatory reporting timeframes are met.
• Partner with business leaders, Risk Partners and Line 1 teams to strengthen compliance practices and embed effective risk management across the organisation.
• Support and contribute to compliance assurance activities, providing specialist privacy expertise and participating in reviews to assess the effectiveness of controls and compliance obligations.
• Provide constructive challenge and oversight of the risk and control environment, reviewing risk profiles, control effectiveness, key metrics and supporting data to drive continuous improvement.
• Act as a key point of contact for compliance-related matters, collaborating with stakeholders across the business and contributing to a broad range of compliance initiatives.
• Support incident management activities by providing expert advice and guidance on privacy-related incidents, investigations and regulatory obligations.
• Monitor and interpret emerging legislation, regulations and industry developments, assessing impacts and supporting the implementation of compliance requirements across icare.
• Prepare insights, reporting and recommendations for senior leaders to support informed decision-making and enhance organisational compliance maturity.

Skills & Experience

• 5-7 years' experience in Compliance, Risk, Assurance or a related governance function, with strong expertise in Privacy Compliance.
• Relevant tertiary qualifications in Business, Commerce, Finance, Law or a related discipline.
• Experience working within highly regulated environments, with exposure to government, insurance, financial services or similarly complex industries highly regarded.
• Strong experience analysing, interpreting and reporting on compliance obligations, frameworks and risk management strategies.
• Demonstrated ability to provide practical compliance advice and influence stakeholders across all levels of an organisation.
• Deep expertise in: Privacy and technology risk, regulatory compliance and regulator engagement, workforce and people-related compliance. Expertise in insurance and regulatory frameworks including SIRA would be highly regarded.
• Excellent analytical, problem-solving and report-writing skills, with the ability to translate complex regulatory requirements into clear business outcomes.
• A collaborative approach with a proven ability to build trusted relationships and partner effectively with diverse stakeholders.

Culture

We know our strength comes from the diversity of our people and would encourage people with different experiences and backgrounds to apply. We are committed to our people’s development so the people of NSW can thrive.

About the Company

We care for the people of NSW, building confidence and trust so our communities can thrive. We make the complex simple, so our schemes deliver better outcomes for people and communities.Whether a person is severely injured in the workplace or on our roads, icare supports their long-term care needs to improve quality of life, including helping people return to work.

• For more information about icare visit our website
• icare operates a direct sourcing model so no agency introductions will be accepted
• We are aCircleBackInitiative Employer – we commit to respond to every applicant
• A talent pool may be created through this recruitment process.

Please note that you must be an Australian citizen, permanent resident of Australia, New Zealand citizen with a current New Zealand passport or have unrestricted working rights to apply for this role.