Privacy Officer: Governance & Data Risk (Hybrid)

Export Finance Australia; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Hybrid work environment

Great Place to Work certified

Job summary

Export Finance Australia is seeking a Privacy Officer in Sydney to lead privacy governance and compliance. The role ensures the organisation meets the Privacy Act 1988 (Cth) and APPs, supports privacy risk management, and oversees information governance and FOI matters.

You will provide expert advice to internal stakeholders, maintain privacy policies and notices, and elevate privacy awareness across the business, with a focus on enterprise-wide risk mitigation.

Qualifications

• Minimum 8 years’ experience in a legal, privacy, information governance, administrative law, risk or compliance role.
• Strong understanding of the Privacy Act 1988 (Cth) and Australian Privacy Principles
• Familiarity with government frameworks and regulatory environments
• Knowledge of FOI processes would be highly regarded.

Responsibilities

• Develop and maintain EFAs privacy management framework
• Advise internal stakeholders on privacy regulatory developments
• Oversee Privacy Policy, management plans, and notices
• Lead PIAs for new projects and track recommendations
• Manage privacy incidents and data breaches, including investigations and notifications
• Engage with external bodies (OAIC) as required
• Deliver privacy training and awareness programs
• Provide FOI support and coordination as needed

Skills

Privacy compliance

Regulatory knowledge

Data protection

Stakeholder engagement

Education

LLB or JD

CIPP/E or CIPM

Job description

Export Finance Australia is seeking a Privacy Officer in Sydney to lead privacy governance and compliance. The role ensures the organisation meets the Privacy Act 1988 (Cth) and APPs, supports privacy risk management, and oversees information governance and FOI matters.

You will provide expert advice to internal stakeholders, maintain privacy policies and notices, and elevate privacy awareness across the business, with a focus on enterprise-wide risk mitigation.