Senior Officer IT Governance and Privacy

Environment Protection Authority; Melbourne; On-site; AUD 129,000 - 141,000; Full time

Job summary

EPA Victoria is seeking a Senior Officer IT Governance & Privacy to lead the organisation's information security, privacy, technology, data and AI governance practices within the Information Security unit. You will maintain the policy framework, lead privacy and AI assurance activities, and prepare statutory information security and privacy reporting.

This role offers the opportunity to translate complex obligations into practical guidance, strengthen control assurance and audit readiness, and

Qualifications

• Experience in information security, privacy, data and AI governance, risk and compliance in government or a similarly regulated environment.
• Knowledge of VPDSF, Privacy and Data Protection Act 2014 (Vic) and related policies and guidance.
• Experience preparing statutory or regulatory compliance reporting and audit responses.
• Knowledge of AI assurance and the National Framework for the Assurance of AI in Government.
• Ability to translate obligations into practical guidance that business areas will adopt.
• Qualifications in IT, Cyber Security, privacy or law desirable.

Responsibilities

• Maintain EPA's information security, privacy, technology, data and AI governance and policy framework, leading its review, approval and communication.
• Lead EPA's Protective Data Security Plan and attestation process and coordinate reporting obligations to OVIC.
• Lead privacy impact assessments and advise business areas on obligations under the Privacy and Data Protection Act 2014 (Vic).
• Lead AI assurance for EPA use cases in line with the National Framework for the Assurance of AI in Government and the Victorian generative AI guideline.
• Coordinate control assurance, audit response and remediation tracking, and prepare papers for the Risk and Audit Committee.
• Assure that managed service provider obligations for security, privacy and records are specified in contracts and met in practice.

Skills

Information security governance

Privacy governance

AI governance

Risk & compliance

Policy framework management

Stakeholder communication

Education

IT / Cyber Security / Privacy or Law qualifications

Job description

Senior Officer IT Governance and Privacy

Salary: VPS 5.2 - $128,635 to $140,849 + 12% superannuation

Location: 664 Collins Street, Docklands VIC 3008

About the Organisation

Ongoing, full-time role

Salary: VPS 5.2 - $128,635 to $140,849 + 12% superannuation

Location: 664 Collins Street, Docklands VIC 3008

EPA works to prevent and reduce the harmful effect of pollution and waste on Victoria's environment and people. We work with community, industry and businesses. As the needs of Victorians change, we must be equipped to adapt and respond to a range of factors.

We are a workplace committed to new ways of working, EPA celebrates diversity of people and lifestyles. We offer a wide range of practical options to support both your work and personal life.

The EPA Experience

• See the impact in the communities we live in: at EPA you see your work first-hand
• Range of internal working groups, networks and volunteering opportunities
• On-the-job training for a wide range of environmental roles
• Flexible start and finish times, as well as compressed work week options

About the role:

As Senior Officer IT Governance & Privacy, you will lead EPA's information security, privacy, technology, data and AI governance practice within the Information Security unit. You will maintain the policy framework, lead privacy and AI assurance activities, and prepare statutory information security and privacy reporting.

This is an opportunity to translate complex obligations into practical guidance, strengthen control assurance and audit readiness, and influence how EPA manages security, privacy, data and AI risk.

In this role you will:

• Maintain EPA's information security, privacy, technology, data and AI governance and policy framework, leading its review, approval and communication.
• Lead EPA's Protective Data Security Plan and attestation process and coordinate reporting obligations to OVIC.
• Lead privacy impact assessments and advise business areas on obligations under the Privacy and Data Protection Act 2014 (Vic).
• Lead AI assurance for EPA use cases in line with the National Framework for the Assurance of AI in Government and the Victorian generative AI guideline.
• Coordinate control assurance, audit response and remediation tracking, and prepare papers for the Risk and Audit Committee.
• Assure that managed service provider obligations for security, privacy and records are specified in contracts and met in practice.

Skills and experience

• Demonstrated experience in information security, privacy, technology, data and AI governance, risk and compliance in government or a similarly regulated environment.
• Demonstrated working knowledge of the VPDSF, Privacy and Data Protection Act 2014 (Vic), Public Records Act 1973 (Vic), and associated policies and guidance.
• Experience preparing statutory or regulatory compliance reporting and audit responses.
• Working knowledge of AI assurance and the National Framework for the Assurance of AI in Government.
• Demonstrated ability to translate obligations into practical guidance that business areas will adopt.
• Relevant qualifications in IT, Cyber Security, privacy or law are highly desirable.

Need to know more?

All prospective employees will also undergo a National Criminal Record Check prior to an offer of employment. You must be an Australian Citizen or Permanent Resident or hold a valid work permit or visa. Preferred candidates will be subject to pre-employment checks including, but not limited to, police checks, reference checks and role related security clearances.

EPA Victoria recognises the value of the diversity, strength, and knowledge of Aboriginal and Torres Strait Islander people as we work with Traditional Owners to care for our environment. We provide a culturally safe and embracing work environment.

We are an equal opportunity employer with a commitment to merit, equity, diversity, and inclusion in the workplace. We believe our workforce should represent the diversity of the lands upon which we reside; and we actively embrace staff of different abilities, orientations, backgrounds, faiths, and genders.