• Monday to Friday | West Perth Office
• 2 Year Fixed Term Contract
• Private health cover contribution for employees and immediate family
• Performance, Retention and Profit Share Bonuses

About the role:

The Cyber Security team, along with the Legal Counsel are currently seeking a Specialist Privacy to join them on a Monday - Friday roster based at our West Perth office. Reporting to the Manager Cyber Security, you will be responsible for supporting the protection of Hancock Iron Ore’s personal and sensitive information by helping to establish, implement, and maintain effective privacy and data security governance, processes, and controls across the organisation. The role contributes to strengthening the organisation’s privacy capability and regulatory compliance posture by working closely with legal, cyber security, technology, data governance, and business teams.

The position plays an important role in ensuring privacy considerations are embedded into business processes, technology initiatives, and data management practices. This includes supporting privacy impact assessments, advising on regulatory obligations, assisting with privacy incident management, and contributing to the development and maintenance of privacy policies, standards, and procedures as well as leading our data loss prevention maturity uplift.

Duties:

• Ensuring organisational compliance with applicable privacy legislation and standards, including the Australian Privacy Act and Australian Privacy Principles (APPs), and consider international obligations where relevant (e.g., GDPR)
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for projects, systems, and business initiatives involving personal information
• Work with technology, data governance, and business teams to identify and document personal information flows and maintain data mapping and data inventory activities.
• Ensure privacy requirements are considered within technology architecture, security controls, and data management practices
• Provide guidance to business and technology stakeholders on privacy obligations, data handling practices, and privacy-by-design principles
• Support the management and investigation of privacy incidents and data breaches, including assisting with breach assessments, regulatory notification considerations, and remediation activities
• Develop and maintain privacy guidance materials, standards, and operating procedures aligned with organisational risk and governance frameworks
• Monitor emerging privacy regulations, industry practices, and regulatory guidance to inform ongoing improvements to the organisation’s privacy program
• Help lead and establish our data loss prevention (DLP) capability including defining key data types and associated detection and prevention policies.

Skills and Experience:

• Degree in Law, Information Technology, Cyber Security, Information Governance, Risk Management, or related discipline; or equivalent practical experience
• Experience with data loss prevention (DLP) capability building and implementation
• Exposure to privacy or data protection obligations within Australian regulatory frameworks is desirable
• Experience in privacy, information governance or Cyber security roles
• Experience supporting privacy compliance activities such as privacy impact assessments, regulatory interpretation, or policy development