Privacy and Data Risk Specialist

We’re all about helping our members make the most of their money. And while they go after their goals, you can too. As a Privacy and Data Risk Specialist, you’ll help strengthen the way we identify, manage and monitor privacy, data and emerging AI risks across Australian Retirement Trust.
 

Working within our Risk and Compliance function, you’ll provide independent oversight, assurance and practical risk advice. You’ll partner with business, technology, data, cyber and operational risk teams to assess controls, review initiatives and turn complex information into clear, actionable insights.
 

This is an opportunity to contribute across a broad range of work, from Privacy Impact Assessments and data risk reviews to thematic assurance, incident analysis and governance reporting. You’ll be part of a collaborative team that values sound judgement, curiosity and continuous improvement.
 

This role is a permanent opportunity based in Brisbane, Sydney, or Melbourne.

Day to day, you’ll:

• Support privacy and data risk reviews across business processes, projects, technology initiatives and data-related activities.
• Review Privacy Impact Assessments and recommend practical privacy risk treatments and controls.
• Provide oversight of privacy by design across projects, technology initiatives, data use cases and proposed AI use cases.
• Assess key data and privacy controls to identify gaps, risks and improvement opportunities.
• Conduct control testing, assurance reviews and thematic reviews across privacy, data and AI risk areas.
• Monitor key risk indicators and analyse trends to support effective risk management and decision-making.
• Review privacy incidents, breaches, complaints and requests to identify root causes and control improvements.
• Track risk issues, audit findings, remediation activities and management actions through to completion.
• Prepare clear risk reports, dashboards, committee papers and management information.
• Support governance forums by coordinating reporting, papers, decisions and meeting actions.
• Partner with stakeholders across first, second and third lines of defence.
• Promote proactive risk management through awareness, training and capability-building activities.
• Contribute to improvements in risk frameworks, assurance methodologies and reporting processes.
• Act as a trusted adviser on privacy and data risk matters across the organisation.

It goes without saying you’ll be a great communicator with top notch interpersonal skills. We’ll also expect you to pick up problems and come up with quick, creative ways to solve them. It’s quite likely you tick some of the following boxes too:

• You have working knowledge of the Australian Privacy Act and relevant privacy obligations.
• Your experience includes privacy risk assessments, Privacy Impact Assessments or data incident response.
• You’ll bring experience in risk, compliance, assurance, audit, data governance, privacy or technology risk within a regulated environment.
• You’re familiar with data governance, data management, AI governance or privacy risk concepts.
• You have experience conducting risk assessments, control reviews, assurance activities or control testing.
• Your analytical and problem-solving skills enable you to identify issues and develop practical recommendations.
• You’ll be comfortable analysing complex information and presenting findings clearly in reports and stakeholder communications.
• You’re able to build trusted relationships and work effectively with stakeholders across different business and technical areas.
• You can manage competing priorities, work independently and contribute positively within a collaborative team.
• Your tertiary qualification may be in business, technology, data, law, risk, governance or a related discipline.
• You may bring experience from financial services, superannuation or another regulated industry.
• Your knowledge may include APRA prudential standards, CPS 230, CPS 220 or related regulatory requirements.
• You’ll ideally hold a certification in privacy, risk, audit, data governance or cybersecurity.
• You’re confident using reporting, data analysis or dashboarding tools such as Power BI.