Data Privacy Specialist

The Data Privacy Specialist role provides data privacy and information governance expertise, strengthening ASX's ability to identify, assess and manage privacy risk and to comply with evolving privacy, data protection and regulatory requirements impacting ASX. The role supports the ongoing uplift and embedment of ASX's privacy framework, controls and capabilities across the personal information lifecycle.

Regulatory Operations is a function within EC&O, supporting regulatory compliance through innovation, automation and cross‐functional collaboration. The team partners closely with business areas to uplift regulatory capability, embed effective controls and support consistent, high‐quality regulatory outcomes.

What You Will Be Doing

• Provide specialist expertise and input on all data privacy matters throughout the privacy lifecycle for the ASX group.
• Support the development, implementation and embedment of ASX's privacy policies, procedures and operating model within the ASX Enterprise Risk Management Framework.
• Assist with the embedment of privacy‐by‐design principles into business‐as‐usual processes, projects, technology initiatives and data use cases, including providing data privacy SME input on proposed AI use cases.
• Support the conduct and quality assurance of Privacy Impact Assessments (PIAs), including risk identification, mitigation tracking and stakeholder engagement.
• Lead privacy incident and data breach response activities, including triage, assessment, documentation and remediation actions.
• Contribute to the uplift and maintenance of privacy obligations, risks and controls, including ERICA alignment, evidence artefacts and assurance readiness.
• Analyse privacy issues, incidents and control gaps, and support remediation, uplift and continuous improvement initiatives.
• Educate business units and build enterprise awareness on privacy obligations and regulatory requirements in a practical and risk‐based manner.
• Support internal reporting, regulatory engagement and executive‐level updates relating to data privacy risk.

What You Will Bring

Must have

• Significant experience in data privacy gained via private practice and/or in‐house privacy focused roles.
• Strong working knowledge of the Australian Privacy Act and GDPR privacy regimes.
• Experience executing privacy risk assessments, impact assessments and/or data incident response processes.
• Ability to translate complex legal, regulatory and policy requirements into practical, business‐ready guidance.
• Tertiary qualification in law, data governance, risk, compliance, information management or a related discipline (or equivalent experience).

Nice To Have

• Experience supporting regulatory engagement, audits or executive‐level reporting relating to privacy or data risk.
• Experience working in or alongside Legal, Risk, Data Governance and/or Compliance functions.
• Exposure to enterprise risk management frameworks, control environments or assurance processes.
• Experience supporting technology, data or AI‐related initiatives from a privacy‐by‐design perspective.

We make hiring decisions based on your skills, capabilities and experience, and how you'll help us to live our values. We encourage you to apply even if you don't meet all the criteria of this role.

To be considered for this position, candidates must be legally authorised to work in Australia on a permanent basis without any restrictions. We will arrange for successful candidates to have background checks, including reference and police checks, completed as part of the on‐boarding process.