Privacy Officer

Export Finance Australia; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Hybrid work environment

Great Place to Work certified

Job summary

Export Finance Australia is seeking a Privacy Officer in Sydney to lead privacy governance and compliance. The role ensures the organisation meets the Privacy Act 1988 (Cth) and APPs, supports privacy risk management, and oversees information governance and FOI matters.

You will provide expert advice to internal stakeholders, maintain privacy policies and notices, and elevate privacy awareness across the business, with a focus on enterprise-wide risk mitigation.

Qualifications

• Minimum 8 years’ experience in a legal, privacy, information governance, administrative law, risk or compliance role.
• Strong understanding of the Privacy Act 1988 (Cth) and Australian Privacy Principles
• Familiarity with government frameworks and regulatory environments
• Knowledge of FOI processes would be highly regarded.

Responsibilities

• Develop and maintain EFAs privacy management framework
• Advise internal stakeholders on privacy regulatory developments
• Oversee Privacy Policy, management plans, and notices
• Lead PIAs for new projects and track recommendations
• Manage privacy incidents and data breaches, including investigations and notifications
• Engage with external bodies (OAIC) as required
• Deliver privacy training and awareness programs
• Provide FOI support and coordination as needed

Skills

Privacy compliance

Regulatory knowledge

Data protection

Stakeholder engagement

Education

LLB or JD

CIPP/E or CIPM

Job description

2d ago , from Export Finance Australia (EFA)

• Join an organisation that has been proudly recognised and certified as a Great Place to Work for five consecutive years
• Hybrid work environment
• Play an impactful role in financing Australian exports and interests

For almost 70 years, Export Finance Australia has helped Australian businesses grow and succeed internationally with finance to secure opportunities, expand into new markets and diversify their presence. We support critical minerals and defence sectors, finance projects that strengthen economic resilience and advance net zero, and back Australian investment in sustainable infrastructure.

Working with banks, other Government agencies and international partners, we back Australia’s exporters, supply chain businesses and industries, contributing to a more stable and prosperous Indo-Pacific while advancing Australia’s trade, investment and economic security objectives.

Your new role

Location: Sydney
Role Type: Full-time, Permanent

The Privacy Officer acts as the first point of contact for all privacy matters at Export Finance Australia, ensuring EFA’s compliance with privacy obligations under the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and other applicable frameworks.

The role provides expert advice to internal stakeholders, ensures robust privacy controls and processes are established and embedded, mitigates privacy related risks at an enterprise level and, where required, supports Export Finance Australia’s management of Freedom of Information matters.

It also plays a critical role in elevating organisational awareness in relation to privacy matters, ensuring an appropriate level of knowledge and understanding across EFA.

Privacy Governance and Compliance

• Proactively support the ongoing development, implementation, and continuous improvement of EFAs privacy management framework
• Monitor and brief internal stakeholders on developments in the privacy regulatory landscape
• Monitor and advise on compliance with the Privacy Act 1988 (Cth) and other relevant legislation, and policies
• Maintain EFAs Privacy Policy, Privacy Management Plan, privacy collection notices, and other internal privacy-related policies and procedures

Privacy Impact Assessments (PIAs)

• Contribute to and advise on PIAs for new projects, systems and initiatives
• Maintain a register of PIAs and track implementation of recommendations, and any associated risks

Privacy Incident and Data Breach Management

• Manage suspected and confirmed data breaches in line with the Notifiable Data Breaches regime, working closely with key stakeholders across EFA
• Manage other non-notifiable privacy incidents and issues and implement appropriate responses/mitigants
• Support and coordinate investigations, risk assessments and notification processes
• Maintain a data breach register and contribute to post-incident review, ensuring rectifications and process improvements are implemented and embedded

Stakeholder Engagement

• Act as the first point of contact for advice on privacy matters across EFA
• Provide timely, practical and actionable advice to internal stakeholders
• Clearly interpret legislative and policy requirements, keeping in mind operational contexts and practical considerations
• Liaise with external bodies, including the Office of the Australian Information Commissioner (OAIC), where required

Training and Awareness

• Develop and deliver privacy training and awareness programs across EFA
• Promote awareness of the role of the privacy officer within EFA
• Provide guidance materials and resources for EFA employees

Freedom of Information

• Provide ad hoc support and advice in relation to Freedom of Information (FOI) matters, including coordinating responses, managing stakeholders and assisting with statutory obligations as required.

Qualifications & Skills

Experience

• Minimum 8 years’ experience in a legal, privacy, information governance, administrative law, risk or compliance role
• Strong understanding of the Privacy Act 1988 (Cth) and Australian Privacy Principles
• Familiarity with government frameworks and regulatory environments, ideally within a corporate commonwealth entity or government environment
• Knowledge and/or experience within a finance related industry
• Knowledge of the Freedom of Information Act 1982 (Cth) and practical experience with FOI processes would be highly regarded.

Qualifications

• Tertiary qualifications in law (LLB or JD)
• Privacy related certifications (e.g. CIPP/E, CIPM) and/or public policy, risk/governance, information management, or a related field would also be beneficial

Even if you haven't ticked every box but this role resonates with you, don't rule yourself out just yet, we'd love to hear from you!

Our benefits and culture

We are small enough to have an impact, BIG enough to make a world of difference and it starts with our people.

We support flexible working and pride ourselves in fostering a culture that is inclusive, diverse and collaborative. We are proud to be certified as a 2025 Great Place to Work for a fifth consecutive year, recognised on the 2023 AFR BOSS Best Places to Work list and listed as one of Australia’s Best Workplaces for Women in 2025.

In line with our commitment to our people, we have a comprehensive array of benefits available to our employees:

• Generous leave provisions (e.g. Annual Wellbeing day) and leave purchase opportunities
• 18 weeks of paid parental leave for primary caregivers
• Thorough induction onboarding program
• Fitness Passport along with other Health & Wellbeing initiatives
• Gender affirmation leave
• Income Protection Insurance
• Community volunteering
• and many more!

Our headquarters is based in Sydney CBD, and we have a national presence across Melbourne, Canberra, Brisbane, Perth and Adelaide.

Australian Citizenship - To be eligible to apply for this position, applicants must hold Australian Citizenship at the time of application.

Security Clearance - To be eligible to apply for this position, applicants must be able to obtain and maintain a Baseline security clearance.

We invite and welcome applications from Aboriginal and Torres Strait Islander people, people from diverse cultural backgrounds, people with disability and members of the LGBTQIA+ community.

If you are a candidate with a disability, let us know how we can provide you with additional support.

About us

The reason our people join us, stay with us and grow with us is because they wholeheartedly believe in our purpose. They can see the impact we create for our customers.

We are a highly purpose-driven organisation. We seek to create an inclusive culture that values our customers and employees. Our people are expected to champion this and play a key role in achieving those outcomes. In working towards our strategy, our people display our IMPACT leadership behaviours of Frank & Fearless, Dexterous & Agile and Careful & Diligent

For more information about us, please refer to ourwebsite.

Applications from recruitment agencies will not be considered on this occasion.