Privacy Officer

Lead BDO's privacy function and help strengthen how privacy is embedded across the firm. Working across risk, legal, data, IT and the broader business, you will guide privacy initiatives, advise on risk and compliance, and support practical, business-aligned decision-making. You will also lead and develop the privacy team and contribute to a strong, sustainable privacy culture.



Key Duties and Responsibilities

• Lead delivery of the firm's privacy roadmap and strategic privacy initiatives.
• Lead and develop the privacy team, including setting priorities, allocating work and supporting capability development.
• Interpret privacy obligations and provide practical advice on privacy risk across Australian and relevant international frameworks.
• Embed privacy-by-design requirements into policies, processes, systems, projects and technology delivery, including AI and data initiatives.
• Partner with IT, security, architecture, data, legal, risk and business teams to design and operate effective privacy controls.
• Oversee privacy impact assessments, third-party privacy risk and cross-border data considerations.
• Manage privacy operations, including incident and breach response, data subject requests, compliance registers and assurance activities.
• Report on privacy risk, controls, incidents and agreed metrics to senior stakeholders and governance forums.
• Deliver privacy training and awareness, monitor regulatory developments and drive continuous improvement of the privacy framework.

Skill/Attribute required

• Strong working knowledge of privacy laws and frameworks, including the Privacy Act and Australian Privacy Principles, the Notifiable Data Breaches scheme and relevant international regimes such as GDPR.
• Ability to translate complex privacy obligations into clear, practical and commercially balanced advice.
• Experience influencing and partnering across IT, legal, risk, data and business teams.
• Strong analytical, problem-solving and risk-based decision-making skills.
• Confident leadership skills with the ability to set priorities and support team development.
• Excellent written and verbal communication skills, including policy drafting and executive reporting.
• Ability to manage competing priorities and deliver outcomes in a fast-paced environment.
• High level of accountability, attention to detail and autonomy.

Qualifications and Experience required

• Tertiary qualification in Law, Business, Information Systems or a related discipline.
• Professional certification in privacy or risk management is desirable, such as CIPP/A, CIPM or equivalent.
• Strong experience in privacy, data governance or compliance within a medium to large organisation.
• Demonstrated experience embedding privacy-by-design into business processes, systems and technology delivery.
• Experience conducting privacy impact assessments and managing privacy risk, incidents, data subject rights and compliance registers.
• Familiarity with data governance and information security frameworks, such as ISO 27001 or NIST, and experience supporting audits, client questionnaires or accreditation submissions.