Privacy Officer

Export Finance Australia; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Generous leave provisions

18 weeks parental leave

Fitness Passport

Gender affirm. leave

Income protection insurance

Diversity & volunteering

Job summary

Export Finance Australia is seeking a experienced Privacy Officer to lead governance, risk management, and compliance across the organisation. You will develop and maintain privacy policies, manage PIAs, and coordinate data breach responses while collaborating with internal teams and external bodies.

The role emphasizes advisory support, regulatory monitoring, and training to raise awareness of privacy obligations.

Qualifications

• Minimum 8 years’ experience in a legal, privacy, information governance, administrative law, risk or compliance role.
• Strong understanding of the Privacy Act 1988 (Cth) and Australian Privacy Principles.
• Familiarity with government frameworks and regulatory environments, ideally within a corporate commonwealth entity or government environment.
• Knowledge and/or experience within a finance related industry.
• Knowledge of the Freedom of Information Act 1982 (Cth) and practical experience with FOI processes would be highly regarded.

Responsibilities

• Proactively support the ongoing development, implementation, and continuous improvement of EFAs privacy management framework.
• Monitor and brief internal stakeholders on developments in the privacy regulatory landscape.
• Monitor and advise on compliance with the Privacy Act 1988 (Cth) and other relevant legislation, and policies.
• Maintain EFAs Privacy Policy, Privacy Management Plan, privacy collection notices, and other internal privacy-related policies and procedures.
• Contribute to and advise on PIAs for new projects, systems and initiatives.
• Maintain a register of PIAs and track implementation of recommendations, and any associated risks.
• Manage suspected and confirmed data breaches in line with the Notifiable Data Breaches regime, working closely with key stakeholders across EFA.
• Manage other non-notifiable privacy incidents and issues and implement appropriate responses/mitigants.
• Support and coordinate investigations, risk assessments and notification processes.
• Maintain a data breach register and contribute to post-incident review, ensuring rectifications and process improvements are implemented and embedded.
• Act as the first point of contact for advice on privacy matters across EFA.
• Provide timely, practical and actionable advice to internal stakeholders.
• Clearly interpret legislative and policy requirements, keeping in mind operational contexts and practical considerations.
• Liaise with external bodies, including the OAIC, where required.
• Develop and deliver privacy training and awareness programs across EFA.
• Promote awareness of the role of the privacy officer within EFA.
• Provide guidance materials and resources for EFA employees.
• Provide ad hoc support and advice in relation to Freedom of Information (FOI) matters.

Skills

Legal experience

Privacy knowledge

Information governance

Regulatory environments

FOI processes

Risk & compliance

Stakeholder engagement

Education

LLB or JD

Privacy certifications (CIPP/E, CIPM)

Job description

• Join an organisation that has been proudly recognised and certified as a Great Place to Work for five consecutive years


• Hybrid work environment


• Play an impactful role in financing Australian exports and interests

ABOUT OUR ORGANISATION

Location: Sydney

Role Type: Full-time, Permanent

For almost 70 years, Export Finance Australia has helped Australian businesses grow and succeed internationally with finance to secure opportunities, expand into new markets and diversify their presence. We support critical minerals and defence sectors, finance projects that strengthen economic resilience and advance net zero, and back Australian investment in sustainable infrastructure.

Working with banks, other Government agencies and international partners, we back Australia’s exporters, supply chain businesses and industries, contributing to a more stable and prosperous Indo-Pacific while advancing Australia’s trade, investment and economic security objectives.

The Privacy Officer acts as the first point of contact for all privacy matters at Export Finance Australia, ensuring EFA’s compliance with privacy obligations under the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and other applicable frameworks.

The role provides expert advice to internal stakeholders, ensures robust privacy controls and processes are established and embedded, mitigates privacy related risks at an enterprise level and, where required, supports Export Finance Australia’s management of Freedom of Information matters.

It also plays a critical role in elevating organisational awareness in relation to privacy matters, ensuring an appropriate level of knowledge and understanding across EFA.

Privacy Governance and Compliance

• Proactively support the ongoing development, implementation, and continuous improvement of EFAs privacy management framework


• Monitor and brief internal stakeholders on developments in the privacy regulatory landscape


• Monitor and advise on compliance with the Privacy Act 1988 (Cth) and other relevant legislation, and policies


• Maintain EFAs Privacy Policy, Privacy Management Plan, privacy collection notices, and other internal privacy-related policies and procedures

Privacy Impact Assessments (PIAs)

• Contribute to and advise on PIAs for new projects, systems and initiatives


• Maintain a register of PIAs and track implementation of recommendations, and any associated risks

Privacy Incident and Data Breach Management

• Manage suspected and confirmed data breaches in line with the Notifiable Data Breaches regime, working closely with key stakeholders across EFA


• Manage other non-notifiable privacy incidents and issues and implement appropriate responses/mitigants


• Support and coordinate investigations, risk assessments and notification processes


• Maintain a data breach register and contribute to post-incident review, ensuring rectifications and process improvements are implemented and embedded

Stakeholder Engagement

• Act as the first point of contact for advice on privacy matters across EFA


• Provide timely, practical and actionable advice to internal stakeholders


• Clearly interpret legislative and policy requirements, keeping in mind operational contexts and practical considerations


• Liaise with external bodies, including the Office of the Australian Information Commissioner (OAIC), where required

Training and Awareness

• Develop and deliver privacy training and awareness programs across EFA


• Promote awareness of the role of the privacy officer within EFA


• Provide guidance materials and resources for EFA employees

Freedom of Information

• Provide ad hoc support and advice in relation to Freedom of Information (FOI) matters, including coordinating responses, managing stakeholders and assisting with statutory obligations as required.

QUALIFICATIONS & SKILLS

Experience

• Minimum 8 years’ experience in a legal, privacy, information governance, administrative law, risk or compliance role


• Strong understanding of the Privacy Act 1988 (Cth) and Australian Privacy Principles


• Familiarity with government frameworks and regulatory environments, ideally within a corporate commonwealth entity or government environment


• Knowledge and/or experience within a finance related industry


• Knowledge of the Freedom of Information Act 1982 (Cth) and practical experience with FOI processes would be highly regarded.

Qualifications

• Tertiary qualifications in law (LLB or JD)


• Privacy related certifications (e.g. CIPP/E, CIPM) and/or public policy, risk/governance, information management, or a related field would also be beneficial

Even if you haven’t ticked every box but this role resonates with you, don't rule yourself out just yet, we'd love to hear from you!

OUR BENEFITS & CULTURE

We are small enough to have an impact, BIG enough to make a world of difference and it starts with our people.

We support flexible working and pride ourselves in fostering a culture that is inclusive, diverse and collaborative. We are proud to be certified as a Great Place to Work, recognised on the 2023 AFR BOSS Best Places to Work list and listed as one of Australia’s Best Workplaces for Women in 2025.

In line with our commitment to our people, we have a comprehensive array of benefits available to our employees:

• Generous leave provisions (e.g. Annual Wellbeing day) & leave purchase opportunities


• 18 weeks paid parental leave for primary care givers


• Thorough induction onboarding program


• Fitness Passport along with other Health & Wellbeing initiatives


• Gender affirmation leave


• Income Protection Insurance


• Community volunteering


• and many more!

Our headoffice is based in Sydney CBD, and we have a national presence across Melbourne, Canberra, Brisbane, Perth and Adelaide.

ELIGIBILITY

Australian Citizenship - To be eligible to apply for this position, applicants must hold Australian Citizenship at the time of application.

Security Clearance - To be eligible to apply for this position, applicants must be able to obtain and maintain a Baseline security clearance.

We invite and welcome applications from Aboriginal and Torres Strait Islander people, people from diverse cultural backgrounds, people with disability and members of the LGBTQIA+ community.

If you are a candidate with a disability, let us know how we can provide you with additional support.

ABOUT EXPORT FINANCE AUSTRALIA

Export Finance Australia is Australia’s export credit agency.

The reason our people join us, stay with us and grow with us is because they wholeheartedly believe in our purpose. They can see the impact we create for our customers.

We are a highly purpose-driven organisation. We seek to create an inclusive culture that values our customers and employees. Our people are expected to champion this and play a key role in achieving those outcomes. In working towards our strategy, our people display our IMPACT leadership behaviours of Frank & Fearless, Dexterous & Agile and Careful & Diligent

For more information about us, please refer to our website.