privacy regulatory change & compliance lead

Opportunity to join a leading Australian financial institution within Technology & Enterprise Operations to drive the operationalisation of privacy regulatory change and AI adoption risk frameworks. This role focuses on translating evolving Australian privacy regulations, scam and fraud compliance mandates, and emerging AI risk measures into practical, sustainable operational controls across core banking, payment, and merchant channels.
Key Criteria

• 5–10 years of experience in privacy regulatory change, operational risk, or enterprise compliance within a large financial institution or bank.
• Deep knowledge of Australian Privacy Legislation, Australian Privacy Principles (APPs), OAIC guidance, and notifiable data breach requirements.
• Strong, practical operational mindset—proven ability to bridge the gap between advisory guidance and real-world operational execution.
• Hands-on experience integrating privacy and risk controls into AI adoption, emerging technology change, and data governance.
• Domain knowledge of banking mechanisms, including payments, merchant channels, scams and fraud regulations, and banking license requirements.
• Proven ability to hit the ground running with minimal guidance, conduct detailed gap analysis, and support major incident responses.
• Excellent stakeholder management skills to influence cross-functional teams without direct authority.

Key Relationships

• Head of Privacy Operations & Senior Privacy Leadership
• Legal, Data Risk Governance, & Records Management Teams
• Group Security, Technology & Line 2 Risk
• Divisional DCOs, Process Owners, & AI Governance Forums

Key Responsibilities

• Translate complex legal, privacy, and AI regulatory mandates into operational controls, process flows, data requirements, and training modules.
• Conduct enterprise gap analysis to ensure compliance across payment systems, merchant offerings, and broader digital change initiatives.
• Support high-priority major incident responses intersecting privacy breaches, cyber security, and operational risk.
• Lead horizon scanning and impact assessments for privacy regulatory change projects, maintaining the enterprise obligation and compliance architecture.
• Design and execute risk-based monitoring and evidence tracking to ensure ongoing alignment with OAIC and APRA guidelines.
• Deliver concise, executive-level reporting, dashboards, and decision-useful insights for senior governance committees.

If this sounds like you, someone you know, or you're ready for a confidential chat regarding your next career step, then apply below and/or send your email to nick.shannon@randstaddigital.com.au. All applications will be reviewed, however due to large demand, detailed feedback may not always be possible.

experience

4 years