About the role
The Data Privacy Specialist role provides data privacy and information governance expertise, strengthening ASX's ability to identify, assess and manage privacy risk and to comply with evolving privacy, data protection and regulatory requirements impacting ASX.
The role supports the ongoing uplift and embedment of ASX's privacy framework, controls and capabilities across the personal information lifecycle.
Regulatory Operations is a function within EC&O;, supporting regulatory compliance through innovation, automation and cross‐functional collaboration.
The team partners closely with business areas to uplift regulatory capability, embed effective controls and support consistent, high‐quality regulatory outcomes.
What You Will Be Doing
Provide specialist expertise and input on all data privacy matters throughout the privacy lifecycle for the ASX group
Support the development, implementation and embedment of ASX's privacy policies, procedures and operating model within the ASX Enterprise Risk Management Framework
Assist with the embedment of privacy‐by‐design principles into business‐as‐usual processes, projects, technology initiatives and data use cases, including proving data privacy SME input on proposed AI use cases
Support the conduct and quality assurance of Privacy Impact Assessments (PIAs), including risk identification, mitigation tracking and stakeholder engagement
Lead privacy incident and data breach response activities, including triage, assessment, documentation and remediation actions
Contribute to the uplift and maintenance of privacy obligations, risks and controls, including ERICA alignment, evidence artefacts and assurance readiness
Analyse privacy issues, incidents and control gaps, and support remediation,



uplift and continuous improvement initiatives
Educate business units and build enterprise awareness on privacy obligations and regulatory requirements in a practical and risk‐based manner
Support internal reporting, regulatory engagement and executive‐level updates relating to data privacy risk
What You Will Bring
Must have
Significant experience in data privacy gained via private practice and/or in‐house privacy focused roles
Solid working knowledge of the Australian Privacy Act and GDPR privacy regimes
Experience executing privacy risk assessments, impact assessments and/or data incident response processes
Ability to translate complex legal, regulatory and policy requirements into practical, business‐ready guidance
Tertiary qualification in law, data governance, risk, compliance, information management or a related discipline (or equivalent experience)
Nice To Have
Experience supporting regulatory engagement, audits or executive‐level reporting relating to privacy or data risk
Experience working in or alongside Legal, Risk, Data Governance and/or Compliance functions
Exposure to enterprise risk management frameworks, control environments or assurance processes
Experience supporting technology, data or AI‐related initiatives from a privacy‐by‐design perspective
We make hiring decisions based on your skills, capabilities and experience, and how you'll help us to live our values.
We encourage you to apply even if you don't meet all the criteria of this role.
To be considered for this position, candidates must be legally authorised to work in Australia on a permanent basis without any restrictions.
We will arrange for successful candidates to have background checks, including reference and police checks, completed as part of the on‐boarding process.
#J-*****-Ljbffr

📌 Data Privacy Specialist (New South Wales)
🏢 ASX
📍 New South Wales