Take hold of a monster opportunity and join Australian Retirement Trust as our Privacy and Data Risk Specialist. You'll provide trusted oversight across privacy, data and emerging AI risks, helping strengthen controls, improve governance and support better decisions across the organisation. If you enjoy combining assurance, analysis and stakeholder engagement to create meaningful impact, this could be your next career move.

Description

We're all about helping our members make the most of their money. And while they go after their goals, you can too. As a Privacy and Data Risk Specialist, you'll help strengthen the way we identify, manage and monitor privacy, data and emerging AI risks across Australian Retirement Trust.

Working within our Risk and Compliance function, you'll provide independent oversight, assurance and practical risk advice. You'll partner with business, technology, data, cyber and operational risk teams to assess controls, review initiatives and turn complex information into clear, actionable insights.

This is an opportunity to contribute across a broad range of work, from Privacy Impact Assessments and data risk reviews to thematic assurance, incident analysis and governance reporting. You'll be part of a team-oriented team that values sound judgement, curiosity and continuous improvement.

This role is a permanent opportunity based in Brisbane, Sydney, or Melbourne.

Responsibilities

Day to day, you'll:

- Support privacy and data risk reviews across business processes, projects, technology initiatives and data-related activities.
- Review Privacy Impact Assessments and recommend practical privacy risk treatments and controls.
- Provide oversight of privacy by design across projects, technology initiatives, data use cases and proposed AI use cases.
- Assess key data and privacy controls to identify gaps, risks and improvement opportunities.
- Conduct control testing, assurance reviews and thematic reviews across privacy, data and AI risk areas.
- Monitor key risk indicators and analyse trends to support effective risk management and decision-making.
- Review privacy incidents, breaches, complaints and requests to identify root causes and control improvements.
- Track risk issues, audit findings,



remediation activities and management actions through to completion.
- Prepare clear risk reports, dashboards, committee papers and management information.
- Support governance forums by coordinating reporting, papers, decisions and meeting actions.
- Partner with stakeholders across first, second and third lines of defence.
- Promote proactive risk management through awareness, training and capability-building activities.
- Contribute to improvements in risk frameworks, assurance methodologies and reporting processes.
- Act as a trusted adviser on privacy and data risk matters across the organisation.

Qualifications

It goes without saying you'll be a great communicator with top notch interpersonal skills. We'll also expect you to pick up problems and come up with quick, creative ways to solve them. It's quite likely you tick some of the following boxes too:

- You have working knowledge of the Australian Privacy Act and relevant privacy obligations.
- Your experience includes privacy risk assessments, Privacy Impact Assessments or data incident response.
- You'll bring experience in risk, compliance, assurance, audit, data governance, privacy or technology risk within a regulated environment.
- You're familiar with data governance, data management, AI governance or privacy risk concepts.
- You have experience conducting risk assessments, control reviews, assurance activities or control testing.
- Your analytical and problem-solving skills enable you to identify issues and develop practical recommendations.
- You'll be comfortable analysing complex information and presenting findings clearly in reports and stakeholder communications.
- You're able to build trusted relationships and work effectively with stakeholders across different business and technical areas.
- You can manage competing priorities, work independently and contribute positively within a collaborative team.




- Your tertiary qualification may be in business, technology, data, law, risk, governance or a related discipline.
- You may bring experience from financial services, superannuation or another regulated industry.
- Your knowledge may include APRA prudential standards, CPS 230, CPS 220 or related regulatory requirements.
- You'll ideally hold a certification in privacy, risk, audit, data governance or cybersecurity.
- You're confident using reporting, data analysis or dashboarding tools such as Power BI.

About us

Our 2.4 million members trust us to take care of around $375 billion in retirement savings. And we help them take charge of their finances and face the future with confidence. Our inclusive culture means you'll be valued and heard in a respectful workplace. We've created an environment where you can be yourself and do amazing work. It's that simple.

Everyone is welcome to apply. We value diverse thinking, cultures, perspectives, backgrounds, and abilities. Awaken your career at Australian Retirement Trust and apply now. Applications close 22nd September 2026.

We don't want to leave you with a monstrous wait. So, you'll hear from us after the closing date to find out whether you've made it through to the next round or not. Being fair and up-front is important to us, and recruitment is no different.

Why join us

Bring your potential to Australian Retirement Trust and unleash our monster possibilities:

- You'll get 14% super as standard, to help your future come alive.
- Build a career to be proud of through excellent training and development opportunities.
- Balance your work between in-person days at our purpose-built hubs and working from home.
- In the office, enjoy end of trip facilities, a yoga and multi-faith room, parent and carer rooms, quiet rooms, BrewHub coffee facilities, and collaborative team spaces.

We use technology, including artificial intelligence (AI), to support parts of our recruitment process, such as reviewing applications, supporting screening interviews, reference checking, and matching skills to roles. All final hiring decisions are made by people. By applying, you agree to the use of these technologies as part of the recruitment process.

📌 Privacy and Data Risk Specialist (Brisbane)
🏢 Australian Retirement Trust
📍 Brisbane