Data Security & Governance Officer

About the role

Minor Hotels Australasia is looking for an experienced Data Security & Governance Officer to lead the organisation's data security, privacy and governance strategy across the enterprise. The role is based at the Brisbane City Head Office and combines compliance, risk management and business enablement.

Key responsibilities

• Lead data security, privacy and governance initiatives across the enterprise.
• Develop and enhance governance frameworks covering data ownership, classification, lifecycle management and protection.
• Establish policies, standards and procedures for data governance, privacy and information protection.
• Ensure compliance with regulatory obligations, privacy legislation and relevant industry standards.
• Identify, assess and mitigate data‑related risks across the organisation.
• Implement privacy and compliance initiatives such as Privacy by Design, Data Protection Impact Assessments, risk assessments and control reviews.
• Translate regulatory and legal requirements into practical governance processes and operational controls.
• Oversee third‑party and vendor data governance requirements, including due diligence and compliance assurance.
• Implement and manage the Data Governance Management System for ANZ operations.
• Drive improvements in data quality, integrity, lifecycle management and governance maturity.
• Deliver training, awareness and education programmes to strengthen governance capability.
• Provide strategic advice and reporting to senior leadership on governance maturity, compliance and enterprise data risk.

Required profile

• Proven experience in data security, privacy and governance roles.
• Ability to work closely with IT, Legal, Risk, Compliance and business stakeholders.
• Immediate start availability.
• Willingness to travel between Brisbane and Sunshine Coast offices on an ad‑hoc basis.

Required skills

• Data governance frameworks
• Data classification and lifecycle management
• Privacy by Design principles
• Data Protection Impact Assessments
• Risk assessment and control review techniques
• Regulatory compliance (privacy legislation, industry standards)