At TAL, we're committed to helping our people build meaningful careers while making a real difference to Australians. Internal career opportunities are an important part of how we develop capability, support career growth and create opportunities for our people to explore new challenges across the business. This role offers an opportunity to broaden your experience, build new skills, expand your network and continue your development within TAL. Whether you're looking to deepen your expertise, take on new challenges or explore a different area of the business, internal opportunities help our people continue to grow and develop their careers.

Job Description
As a Privacy and Third-Party Risk Lead, you'll play an important role in protecting the privacy and trust of TAL's customers by helping the business navigate evolving data and third-party risks. Working across the organisation, you'll help strengthen how TAL manages data sharing and privacy risk as we continue to transform and innovate. This is an opportunity to make a meaningful impact by enabling responsible business decisions, building confidence in how data is managed and supporting TAL to deliver on its commitment to customers with integrity and care. In This Role You Will:
• Lead high-quality privacy impact assessments to strengthen privacy risk management across the business.
• Assess third party data sharing risks across data flows, residency, retention and security.




• Identify privacy and third-party risk gaps and drive effective resolution with business stakeholders.
• Strengthen third party data governance to support accurate, reliable and informed risk decisions.
• Guide business stakeholders on data sharing and AI disclosure requirements throughout the third-party lifecycle.
• Drive the ongoing uplift of TAL's privacy and third-party risk management frameworks and practices.
• Navigate regulatory change and emerging privacy practices to support TAL's evolving risk environment.
• Influence senior leaders and stakeholders through clear insights and reporting on privacy and third-party risk.

Qualifications:
• Strong experience in privacy risk or third-party risk management, ideally within financial services, insurance or another regulated environment
• Sound knowledge of the Privacy Act 1988, Australian Privacy Principles and relevant privacy regulatory guidance
• Practical understanding of third-party data sharing, residency and retention risks, including privacy impact assessments
• Familiarity with third party risk management frameworks, contract considerations and risk registers
• Understanding of privacy and data risks associated with third party use of AI and emerging technologies
• Solid communication and stakeholder engagement skills, with confidence influencing across business, risk and technology teams

📌 Privacy and Third Party Risk Lead (Sydney)
🏢 TAL Australia
📍 Sydney