Cyber, Data and Privacy lawyer

Job Description:

Shape the future of trusted and secure healthcare

• Lead advice on critical cyber, privacy and data matters: Guide responses to cyber incidents, privacy risks, data breaches and emerging digital health issues across one of Australia’s largest health and aged care organisations.
• Work at the intersection of law, healthcare and technology: Advise on digital transformation, artificial intelligence, technology procurement, information governance and the responsible use and sharing of sensitive health information.
• Influence decisions with national impact: Partner with executives, technology leaders, cyber security specialists, clinical teams and senior stakeholders across public hospitals, private hospitals, aged care, virtual care and corporate services.
  
  

About St Vincent’s Health Australia

At St Vincent’s Health Australia, we are shaping a future health and aged care system that supports people with life-changing care, wherever and whoever they are.

Founded by the Sisters of Charity in 1857, St Vincent’s is one of Australia’s leading not-for-profit health and aged care organisations. Our 30,000 dedicated people provide compassionate care through public and private hospitals, aged care residences, virtual care and services delivered at home across New South Wales, Queensland and Victoria.

Our vision is for every person to receive excellent and compassionate care through a better and fairer health and aged care system. Together, we are focused on enhancing our impact, connecting care and transforming the system. Our work is grounded in our values of Compassion, Justice, Integrity and Excellence.

About the Opportunity

We are seeking an experienced Legal Counsel / Lawyer – Cyber, Data and Privacy to join our collaborative National Legal team in Sydney or Melbourne.

In this influential role, you will provide practical, timely and solutions-focused legal advice on cyber security, privacy, data governance and technology-related matters across St Vincent’s national operations. You will help the organisation navigate a rapidly evolving legal and regulatory environment while enabling innovation and protecting the information entrusted to us by patients, residents, employees and communities.

Working closely with senior leaders and subject-matter experts across legal, technology, cyber security, risk, clinical governance, procurement and operations, you will contribute to strategic initiatives and advise on complex matters where law, data, technology and healthcare intersect.

This is an outstanding opportunity to use your specialist legal expertise to support responsible innovation, strengthen organisational resilience and help maintain trust in the delivery of contemporary healthcare.

Your Key Responsibilities

As a trusted member of the National Legal team, you will:

• Provide strategic and operational advice on privacy, cyber security, data protection, information governance and technology-related legal matters.
• Advise on the collection, use, disclosure, storage, sharing, retention and protection of personal, sensitive and health information.
• Support the organisation’s response to cyber incidents, privacy complaints and suspected or confirmed data breaches.
• Provide advice on regulatory notification and reporting obligations arising from cyber and privacy incidents.
• Advise on privacy impact assessments and data protection considerations associated with new systems, technologies, services and models of care.
• Support digital transformation initiatives, including artificial intelligence, virtual care, data analytics, cloud-based platforms and emerging healthcare technologies.
• Draft, review and negotiate privacy, data security, confidentiality and cyber-related provisions in commercial and technology contracts.
• Partner with procurement, technology and operational teams on IT agreements, software and cloud arrangements, vendor engagements and data-sharing agreements.
• Monitor relevant legislative and regulatory developments and translate complex requirements into clear, practical guidance.
• Develop and review privacy notices, consent materials, policies, procedures, contractual templates and other governance documents.
• Build trusted relationships with executives, divisional leaders, clinicians, technology teams and external stakeholders.
• Collaborate with colleagues across the National Legal team and contribute specialist knowledge to broader corporate, commercial, regulatory and risk matters.

About You

You are a commercially minded lawyer with experience advising on privacy, data, cyber security or technology matters. You combine strong technical legal capability with sound judgement and a practical understanding of organisational risk.

You are comfortable working through complex and sensitive issues, including matters that require timely advice, careful stakeholder management and coordination across multiple disciplines. You can communicate technical legal concepts clearly and provide advice that protects the organisation while supporting responsible innovation and effective service delivery.

You are naturally collaborative, responsive and solutions-focused. You enjoy building trusted relationships and are motivated by the opportunity to apply your legal expertise within a complex, purpose-led organisation whose work directly affects patients, residents and communities.

You Will Bring

• A tertiary qualification in law.
• Admission as a Solicitor or Barrister in the Supreme Court of New South Wales or Victoria.
• Eligibility to hold a New South Wales or Victorian practising certificate without supervision requirements.
• Relevant post-qualification legal experience gained within a major law firm, specialist practice, government agency or in-house legal team.
• Demonstrated experience advising on one or more of the following areas: Privacy and data protectionCyber security and data breachesInformation governanceTechnology and digital contractingArtificial intelligence and emerging technologiesRegulatory compliance
• The ability to provide timely and practical advice at both strategic and operational levels.
• Sound judgement and the ability to balance legal, regulatory, commercial, clinical and reputational considerations.
• Strong drafting and negotiation skills, particularly in relation to technology, privacy, confidentiality, data-sharing and cyber security provisions.
• Highly developed written, verbal and interpersonal communication skills.
• The ability to explain complex legal and technical matters to non-legal audiences.
• Strong planning and organisational skills, including the ability to prioritise urgent matters and meet competing deadlines.
• A self-directed, flexible and collaborative working style.
• The confidence to work autonomously while contributing positively to a connected national team.
• A commitment to St Vincent’s values and an understanding of the social and ethical considerations associated with health information and healthcare delivery.

Experience within healthcare, aged care, financial services, government, technology, telecommunications or another highly regulated sector will be highly regarded.

Why Join St Vincent’s?

• Meaningful work with genuine purpose
  Use your expertise to protect sensitive information, strengthen trust and support the safe delivery of essential health and aged care services.
• A diverse and contemporary legal portfolio
  Work across cyber incidents, privacy, technology contracting, artificial intelligence, digital health, virtual care, information governance and major transformation initiatives.
• National influence and senior stakeholder exposure
  Advise across an extensive operating environment and work with executive leaders, cyber security professionals, technology specialists, clinicians, procurement teams, regulators and external advisers.
• Help enable responsible healthcare innovation
  Support new technologies and models of care by ensuring privacy, cyber security and data protection are considered from design through to implementation.
• Join a connected National Legal team
  Become part of a collaborative legal function that values professional judgement, knowledge sharing, practical problem-solving and specialist expertise.
• Grow within a values-led organisation
  Build your career in an organisation guided by Compassion, Justice, Integrity and Excellence, with a longstanding commitment to delivering better and fairer care
• Protect Trust. Enable Innovation. Make a Difference.
  This is more than a specialist legal role. It is an opportunity to help St Vincent’s embrace digital innovation responsibly while protecting the information and trust of the people and communities we serve.

If you are a cyber, privacy, data or technology lawyer seeking sophisticated legal work, national exposure and a stronger sense of purpose, we would welcome your application.

Apply Now

Join St Vincent’s Health Australia and help us build a secure, responsible and connected future for health and aged care.

Applications may close before the advertised closing date.

Important Information

Employment is subject to satisfactory pre-employment checks, including identification, right-to-work, reference and nationally coordinated criminal history checks. The successful applicant must also comply with applicable St Vincent’s Health Australia policies and screening requirements.

St Vincent’s Health Australia welcomes people from all backgrounds and beliefs. We are committed to creating an inclusive workplace where everyone feels respected, valued and empowered to contribute their unique experiences.

Closing Date:

Reconciliation Action Plan:

At St Vincent's we acknowledge the importance of creating a work environment that is welcoming, safe, equitable and inclusive for Aboriginal and/or Torres Strait Islander Employees. As part of our Commitment to Reconciliation and Closing the Gap in employment related outcomes, we encourage applications from Aboriginal and Torres Strait Islander Peoples.

For further information, visit https://www.svha.org.au/about-us/reconciliation or get in contact at indigenouscareers@svha.org.au

View Reconciliation Action Plan

Code of Conduct:

View Code of Conduct