Exciting opportunity for an experienced privacy professional to lead and enhance privacy governance within a purpose-driven national organisation.
The Australian College of Rural and Remote Medicine (ACRRM) is a member-based organisation that strives to set, maintain and promote high quality professional standards for rural and remote medicine. This helps ensure rural and remote communities have access to safe, accessible and high-quality healthcare.
We are seeking an experienced and proactive Privacy Officer to establish, implement and maintain ACRRM's privacy management framework and ensure compliance with the Privacy Act 1988, Australian Privacy Principles (APPs), the Notifiable Data Breaches (NDB) Scheme and other applicable privacy obligations.
This pivotal role will provide expert advice across the College, embedding privacy principles, supporting the responsible management of personal and health information, coordinating privacy impact assessments, managing privacy incidents and data breaches, and driving continuous improvement in privacy governance and organisational maturity.
The role works collaboratively with stakeholders across all business units to strengthen member, candidate, staff, partner and stakeholder trust through effective privacy risk management and regulatory compliance.
Your duties will include:
- Developing, implementing and maintaining ACRRM's privacy governance framework, policies and procedures.
- Monitoring compliance with privacy legislation, regulatory requirements and organisational obligations.
- Maintaining privacy registers, risk frameworks and reporting on privacy compliance to executive leadership, the Finance, Audit and Risk Committee, and the Board.
- Identifying, assessing and managing privacy risks across projects, systems, procurement activities and business initiatives.
- Coordinating Privacy Impact Assessments and supporting privacy due diligence activities.
- Supporting effective data governance and information management practices, including data mapping, information inventories, retention and disposal requirements.
- Promoting privacy-by-design and privacy-by-default principles across the organisation.
- Managing privacy incidents and suspected data breaches, including investigations, remediation activities and regulatory notifications where required.
- Developing and delivering privacy awareness, training and education programs for staff, contractors, Board members and volunteers.
- Providing practical privacy advice and operational support, including responding to privacy enquiries, assisting with access and correction requests, and supporting contract reviews.
Qualifications and competencies:
- Degree qualification (undergraduate or postgraduate) in a relevant discipline.
- Demonstrated experience in privacy, compliance, risk management, governance or information management roles (minimum 3-5 years).
- Strong knowledge of the Privacy Act 1988, Australian Privacy Principles and related privacy obligations.
- Experience conducting Privacy Impact Assessments and managing privacy risks.
- Experience developing policies, procedures, governance frameworks and compliance programs.
- Demonstrated ability to interpret legislation and provide practical, risk-based advice.
- Strong stakeholder engagement, communication and influencing skills.
- Experience preparing reports and recommendations for executive and board-level audiences.
- Highly developed analytical skills and exceptional attention to detail.
- Experience within the health, education, professional membership or not-for-profit sector will be highly regarded.
- Knowledge of the Notifiable Data Breaches Scheme, information governance and records management principles is desirable.
- Experience with recognised governance frameworks such as ISO 27001, NIST Privacy Framework or similar will be advantageous.
- Privacy qualifications or certifications such as CIPP/A, CIPM or CIPT are desirable.
To be successful in this role the following professional behaviours are required:
- Strong integrity, professionalism and commitment to maintaining confidentiality.
- Sound judgement and the ability to manage sensitive and complex matters with discretion.
- Excellent analytical and problem-solving skills with a practical, solutions-focused approach.
- High attention to detail and commitment to achieving quality outcomes.
- Ability to build trusted relationships and influence stakeholders across all levels of the organisation.
- Strong organisational skills with the ability to manage multiple priorities and competing deadlines.
- Initiative, accountability and a proactive approach to continuous improvement.
- Collaborative working style and ability to contribute positively across teams.
- Strong communication skills with the ability to explain complex privacy requirements in an accessible manner.
- Commitment to fostering a culture of privacy, compliance and responsible information management.
This is an opportunity for a professional, friendly, articulate, solutions focused and collaborative individual to work in a dynamic and motivated team.
As part of living our values, we are visionary, courageous, experts and inclusive. We respect, inspire and support each other and we believe in an inclusive workplace reflective of the communities in which we live and serve. The College recognises the benefits of a diverse workforce and is committed to fostering an inclusive workplace. People living with a disability, those from a culturally diverse background and First Nations people are encouraged to apply for advertised positions. Where appropriate, reasonable workplace accommodations will be provided to ensure equal opportunities for all.
For further information and access to the position description and recruitment timeline visit the ACRRM website or contact ACRRM General Manager - Digital, Technology and Information, Steven Parrish at [email protected].
To apply for this position please submit a cover letter and resume by using the 'Apply' button below. Applications will close on 4 September 2026.
Requirements