Director, Data Governance and Risk Management
">
This is a key senior leadership role within the Enterprise Data Office, reporting to the Chief Data Officer. As a first line of defence, the role works closely with the CISO (Technology), Legal and Compliance teams to ensure data is properly governed, protected, and responsibly used.
">
The Director of Data Governance and Risk Management is responsible for setting up effective governance frameworks and processes to manage data privacy and security in line with compliance needs and risk appetite. This includes leading a team to deliver operational privacy, assurance, and advisory services.
">
About the Role
">
* Lead development and implementation of university wide data privacy and security frameworks that align with organisations risk appetite and compliance requirements.
* Establish and lead a high-performing team to deliver on operational privacy, assurance, and advisory capabilities.
* Work as part of the Data Executive Team to uplift data capabilities across Enterprise Data Office.
* Define and maintain enterprise data classification and handling standards in collaboration with data and system owners to ensure appropriate safeguards are in place where data is used and stored. This would include data retention and disposal.
* Sponsor and/or participate in programs of work that contribute to uplifting data privacy and security across the organisation.
* Work with Cyber security officer and team to establish a BAU operating model with clear roles & responsibilities for governance and enforcement of security controls.
* Collaborate with the Legal Privacy Office to operationalise privacy obligations under legislation such as Privacy and Personal Information Protection Act (PPIP) and the Health Records and Information Privacy Act (HRIP Act)
* Monitor compliance with internal policies and external regulations and escalate material risks or breaches to appropriate governance bodies.
* Collaborate with Technology, Legal, Risk Management, and Data Governance teams to identify privacy risks, conduct and oversee impact assessments (PIAs), and develop mitigation strategies. This includes Data Protection Impact Assessments (DPIAs) for new projects, technologies, or data uses.
">
About You
">
* A relevant tertiary qualification accompanied by demonstrated hands on implementation experience across privacy and security.
* Demonstrable experience in data privacy and security roles with a good understanding of risk management and data governance.
* Proven ability to bridge policy and operations — developing pragmatic and practical frameworks that can translate into implementable standards.
* Excellent understanding of privacy legislation and ethical data use in a complex environment.
* Deep expertise in data privacy and protection tooling is required along with implementation experience.
* Strong strategic thinking and problem-solving skills with the ability to resolve issues that span multiple domains.
* Excellent communication and collaboration skills, with the ability to engage and influence stakeholders at all levels.
">
Benefits
">
* Flexible Working Options.
* Additional leave during festive period.
* Career development opportunities.
* Up to 50% discount on courses.
* Flexible Superannuation contributions and additional leave-loading payments.
* Discounts and entitlements.