Senior Privacy & Governance Officer

About Us

VicTrack is the custodial owner of Victoria’s rail transport land, assets and infrastructure. We work to protect and grow the value of the portfolio, to support a thriving transport system and make travel and living better for all Victorians. With much of our asset portfolio dedicated to rail transport – our land, infrastructure, trams, trains and telecommunication networks – our focus is on strategic asset management and supporting the delivery of better transport solutions.

When you join VicTrack, you'll become part of an organisation that celebrates the diverse backgrounds, perspectives, and life experiences of our people. We are committed to fostering a workplace that mirrors the diverse communities we serve. Everyone is welcome to apply for a role at VicTrack and we encourage open discussions about any adjustments you might need during the recruitment process or within the role. If you have a disability or specific access requirements, please let us know how we can offer you additional support.

Benefits

• Free travel on all public transport – Trains | Trams | V/Line
• 17.5% leave loading
• 1 x Extra day off (EDO) per month
• Flexible work environment | hybrid work 2 x days in office, 3 x days WFH
• Stable work environment - Victorian Government state-owned enterprise
• 16 weeks paid parental leave (36 unpaid)
• Comprehensive health & wellness programs
• Free access to on-site gym and end of trip facilities
• Training and development opportunities to help you grow and develop your career

The challenges of our fast-growing sector put our people at the front of some of Victoria’s most exciting projects in telecommunications, property development and project delivery – with job opportunities as diverse as our organisation.

The Role

This role is a key member of the Legal & Compliance Team, responsible for providing strategic privacy advice to VicTrack’s Executive and senior leadership and ensuring the organisation meets its statutory privacy obligations. The position leads the development and implementation of VicTrack’s privacy function, oversees the management of personal information across its full lifecycle, and acts as a central point of expertise for privacy risk, incident response, and regulatory engagement.

In addition, the role plays a critical part in strengthening VicTrack’s corporate governance environment by managing the organisation’s key governance frameworks and decision-making processes.

The role combines strategic advisory capability with hands-on operational delivery to improve privacy and governance practices.

Key Responsibilities:

• Lead the development, implementation, and continuous improvement of VicTrack’s privacy governance arrangements, including the Privacy Management Framework, Privacy Management Plan, privacy policies, collection notices, and guidance materials.
• Ensure organisational compliance with the Privacy and Data Protection Act 2014 (Vic), Health Records Act 2001 (Vic), Privacy Act 1988 (Cth) and relevant public records and information security requirements.
• Oversee and advise on Privacy Impact Assessments (PIAs), privacy‑by‑design practices, information‑sharing protocols, and vendor privacy requirements. Support and coordinate responses to privacy incidents and data breaches, ensuring alignment with the Office of the Victorian Information Commissioner (OVIC) guidance, Victorian Protective Data Security Framework obligations, and internal incident response processes.
• Deliver, maintain, and enhance VicTrack’s governance frameworks, including delegations of authority, management committee structures, and decision-making policies. Conduct governance maturity assessments and drive continuous improvement to ensure transparent, accountable, and effective organisational decision making.
• Drive a culture of continuous improvement within the privacy and governance, ensuring systems, processes and capability evolve to meet organisational strategy, operations and best practice standards.

Qualifications:

• Tertiary education in a relevant field, such as law, privacy, governance, risk and compliance or business management (mandatory).
• Bachelor’s degree in law (desirable).

Knowledge & Experience:

• Proven experience in managing privacy or governance functions, in a regulated industry.
• Experience driving and delivering high quality outcomes and priorities that ensure legal and regulatory compliance that meets expectations of senior executives, the Board and key stakeholders.
• Extensive knowledge of Victorian privacy legislation, Information Privacy Principles, and public sector privacy governance requirements, with proven experience developing privacy policies, PIAs, collection notices, and privacy guidance materials.
• Proven ability to identify and assess privacy risks, manage privacy incidents and data breaches, and ensure compliance across the full information lifecycle, including collection, use, storage, sharing, accuracy, and destruction of personal information.
• Experience supporting governance processes and applying governance frameworks in practice.
• Demonstrated experience partnering with diverse stakeholders, delivering targeted training and providing clear, practical advice on privacy obligations.
• Strong ability to analyse complex privacy and governance issues, provide clear and actionable advice, develop high-quality reporting, and communicate effectively across all levels of the organisation.

To Apply

***PLEASE ONLY SUBMIT YOUR RESUME AND/OR COVER LETTER IN PDF FORMAT

If you are interested in this exciting opportunity with us, please click apply and submit your resume in PDF format only. All applications are strictly confidential.

We are proud to be recognized by WORK180 as an employer of choice for women. Explore the WORK180 website to learn about our benefits and policies. Research shows that 60% of women and underrepresented groups may decide not to proceed, even after drafting an application. We believe diversity strengthens every team, so even if you don't meet every qualification, we still encourage you to apply!

Offer of employment is strictly subject to successful background (pre-employment screening) and criminal history check. VicTrack is an equal opportunity and human rights employer.

Closing Date: 2/07/2026

***PLEASE ONLY SUBMIT YOUR RESUME AND/OR COVER LETTER IN PDF FORMAT