Cyber & Privacy Lawyer

About the role

GRM LAW, a commercial law firm specialising in business, corporate, banking and finance and property matters, is building a new Brisbane Cyber Advisory practice. It is looking for a Cyber & Privacy Lawyer (2-4 years' post-admission experience) to draft incident-response plans, privacy and AI-governance policies, board cyber reports and regulator responses, and to support breach-coach retainers under direct partner supervision.

Key responsibilities

• Draft incident-response plans, cyber and privacy policies, board cyber reports and regulator correspondence
• Act on breach-coach retainers, guiding clients through notification obligations and privileged incident response
• Advise on the Privacy Act 2026 reforms, including automated decision-making, privacy requests and cross-border data transfers
• Build and run cyber tabletop and incident-response drills
• Conduct cyber due diligence on M&A deals and draft cyber clauses in commercial contracts
• Advise on sector regimes (SOCI, APRA, health and financial services) and on AI

Required profile

• Admitted to practise in Queensland (or eligible) with a current practising certificate
• Around 2-4 years' post-admission experience, ideally with exposure to privacy, data, technology, regulatory or commercial law; strong candidates outside this band considered
• Familiarity with Australian law and regulatory compliance
• Excellent drafting, negotiation, problem-solving and advisory skills, and effective client relationship management
• Comfort engaging with technical concepts; curiosity about how systems work is an advantage

Required skills

• Attention to detail and ability to manage multiple tasks in a fast-paced environment
• Proficiency with legal practice management software is a plus

What we offer

• Above-market remuneration package structured to reward performance
• Direct partner-level supervision and a practice you can help shape
• Access to sophisticated transactional work and its clients
• Brisbane premium CBD office with flexible/hybrid working
• Structured mentoring and growth opportunities

To apply, send your CV and cover letter directly to the firm; applications are handled in strict confidence and agencies are not accepted at this stage.