Senior IT Governance & Privacy Lead — Flexible Hours

Environment Protection Authority Victoria; Melbourne; On-site; AUD 129,000 - 141,000; Full time

Benefits offered by this job

Protect environment

Flexible work style

Diversity & inclusion

Grow professionally

Job summary

Environment Protection Authority Victoria seeks a Senior Officer IT Governance & Privacy to lead its information security, privacy, technology, data and AI governance practice within the Information Security unit. You will maintain the policy framework, lead privacy and AI assurance activities, and prepare statutory information security and privacy reporting.

This role translates complex obligations into practical guidance, strengthens control assurance and audit readiness, and influences how

Qualifications

• Demonstrated experience in information security, privacy, technology, data and AI governance, risk and compliance in government or a similarly regulated environment.
• Knowledge of VPDSF, Privacy and Data Protection Act 2014 (Vic), Public Records Act 1973 (Vic) and related policies.
• Experience preparing statutory or regulatory compliance reporting and audit responses.
• Knowledge of AI assurance and the National Framework for the Assurance of AI in Government.
• Ability to translate obligations into practical guidance adopted by business areas.
• Relevant qualifications in IT, Cyber Security, privacy or law are highly desirable.

Responsibilities

• Maintain EPA's information security, privacy, technology, data and AI governance and policy framework, leading its review, approval and communication.
• Lead EPA's Protective Data Security Plan and attestation process and coordinate reporting obligations to OVIC.
• Lead privacy impact assessments and advise business areas on obligations under the Privacy and Data Protection Act 2014 (Vic).
• Lead AI assurance for EPA use cases in line with the National Framework for the Assurance of AI in Government and the Victorian generative AI guideline.
• Coordinate control assurance, audit response and remediation tracking, and prepare papers for the Risk and Audit Committee.
• Assure that managed service provider obligations for security, privacy and records are specified in contracts and met in practice.

Skills

Information security

Privacy governance

AI governance

Risk & compliance

Policy development

Regulatory reporting

Job description

Environment Protection Authority Victoria seeks a Senior Officer IT Governance & Privacy to lead its information security, privacy, technology, data and AI governance practice within the Information Security unit. You will maintain the policy framework, lead privacy and AI assurance activities, and prepare statutory information security and privacy reporting.

This role translates complex obligations into practical guidance, strengthens control assurance and audit readiness, and influences how