Privacy Officer, Health

About the role

An established healthcare organisation in Sydney is seeking an experienced Privacy Officer. This is a broad, hands-on role covering privacy compliance, incident management, privacy impact assessments and governance. You will work closely with stakeholders across the business to identify and manage privacy risks, give practical guidance and help the organisation meet its obligations under Australian privacy legislation.

Key responsibilities

• Manage and respond to privacy incidents, including those involving sensitive and health information
• Support the assessment, investigation and documentation of potential privacy breaches
• Conduct and support Privacy Impact Assessments (PIAs) across new and existing projects, systems, processes and initiatives
• Maintain privacy registers, records and supporting documentation
• Advise internal stakeholders on privacy obligations and the handling, use, storage and disclosure of personal information
• Support compliance with the Privacy Act and broader Australian privacy requirements
• Identify privacy risks and help implement controls and remediation measures
• Support the development, review and implementation of privacy policies, procedures and governance frameworks
• Monitor changes to privacy legislation and assist in responding to evolving regulatory requirements
• Support privacy reporting and the escalation of significant matters through governance channels
• Work with Legal, Risk, Compliance, Technology and operational teams, and promote privacy awareness and training

Required profile

• Demonstrated experience in privacy, data protection, risk, compliance or a related governance environment
• Experience managing privacy incidents and supporting breach response
• Experience conducting or contributing to Privacy Impact Assessments
• Understanding of privacy governance, risk management and compliance frameworks
• Ability to interpret privacy obligations and give clear, practical guidance
• Strong written communication and documentation skills
• Confidence working with stakeholders across levels and functions; strong judgement with sensitive information
• Proactive, collaborative approach to managing privacy risk
• Experience in healthcare or another highly regulated environment is highly regarded