EL2 Director, Governance, Risk & Compliance Enabling Services Branch

About the Office of the Australian Information Commissioner

Working with the Office of the Australian Information Commissioner (OAIC) will put you at the forefront of data protection and access to information regulation. As an independent statutory agency, the OAIC’s work is of national significance and plays an important role in shaping Australia’s information handling landscape across the economy - from government, digital platforms and the online environment, to health, finance and telecommunications. Our mission is to uphold and promote Australia’s privacy and freedom of information laws.

We are an agency within the Attorney-General’s Department portfolio with responsibility for numerous statutory functions including:

• privacy functions under the Privacy Act 1988 and the Digital ID Act 2024, the My Health Records Act 2012 and in relation to the Consumer Data Right (CDR) under the Competition and Consumer Act 2010, in particular, investigating breaches, handling complaints, conducting audits, developing codes, providing policy guidance and educating the public and industry on privacy;
• freedom of information functions under the Freedom of Information Act 1982, in particular, review of decisions made by agencies and ministers, handling FOI complaints, monitoring and investigating agency compliance, providing policy guidance and educating government and the public on FOI rights; and
• information commissioner functions under the Australian Information Commissioner Act 2010 including reporting to the Minister regarding government policy and practice with respect to the collection, use, disclosure, management, administration or storage of, or access to, information held by government and the systems used.

Leadership roles in the OAIC

Leadership within the OAIC work as a united team, collaborating and supporting each other and staff in achieving outcomes for the Australian community, and ensuring the agency’s success.

You will demonstrate leadership that aligns with the values of the OAIC, which include:

• modelling and championing the OAIC’s Guiding Principles (‘4 Pillars’): being proactive, proportionate, purpose-driven and people-focused
• acting with integrity at all times and demonstrating alignment with the APS Values: Impartial, Committed to service, Accountable, Respectful, Ethical and Stewardship
• managing limited resources effectively and aligned to the OAIC’s regulatory priorities
• empowering and supporting staff to make lawful administrative decisions in accordance with the applicable statutory framework
• leading your team and directly contributing to communicating (internally and externally) and delivering on the strategic direction of the OAIC.

About the Team

The Governance, Risk and Compliance team is responsible for managing the systems of internal control for the agency, including fraud and corruption, and risk management and oversight in accordance with the Public Governance, Performance and Accountability Act 2013 (PGPA Act), Commonwealth Risk Management Policy, Commonwealth Fraud and Corruption Control Framework, Commonwealth Integrity Maturity Framework and relevant OAIC policies. The team coordinates and supports the OAIC Audit and Risk Committee and internal audit functions and is responsible for ensuring compliance with the Protective Security Policy Framework (PSPF) in collaboration with the Chief Security Officer and Chief Information Officer.

Key Relationships

You will be expected to develop and maintain effective and productive working relationships with a broad range of external stakeholders including Audit and Risk Committee members, portfolio agencies, government and private sector. You will represent the OAIC (for activities both within and outside your division) at high levels within and outside government. You will be required to build and maintain strong working relationships across the OAIC, particularly with the Commissioners and SES colleagues.

About The Role

Reporting to the General Manager, Enabling Services, you will contribute to overseeing and coordinating the OAIC’s corporate governance frameworks, risk management, accountabilities, controls, reporting and auditing processes.

You will have broad expertise across governance, risk and compliance functions and the ability to apply these skills within complex projects and environments.

You will maintain a high level of integrity and abide by the APS Code of Conduct.

Key duties include: 

• provide necessary leadership and advice to ensure the OAIC meets its obligations and reporting requirements under the PGPA Act and other relevant legislation
• prepare briefs, policies, procedures, work instructions and guidance materials related to governance, risk and integrity, ensuring that these documents remain relevant and contemporary
• provide strategic advice and contributing to forward planning around operational and strategic objectives
• manage and lead a team to deliver on the agency’s governance and risk objectives and internal and external stakeholder engagements
• oversee and manage governance related projects and activities to strengthen the OAIC’s corporate governance systems and processes
• provide assurances regarding the agency’s processes related to fraud and corruption control.
• lead and contribute to the ongoing development of the OAIC Risk Management Framework, including regular review and reporting of risks in the agency and uplift of overall risk culture at the OAIC
• collaborate with the Chief Security Officer and Chief Information Officer and contribute to internal and external reporting requirements related to the PSPF
• lead the OAIC’s internal audit activities and manage the operation and support to the external Audit and Risk Committee
• other duties as required.

Job Specific Capabilities, Skills & Experience

We are seeking applications from candidates who have:

• strong project management and drafting skills
• a proven ability to work independently and within a team to meet strategic outcomes and statutory timeframes
• the ability to plan, manage and organise their own workload and adapt to ever-changing priorities and deadlines
• a good understanding of, or an ability to quickly acquire an understanding of legislation and frameworks relevant to the OAIC such as the PGPA Act and PSPF
• an excellent work ethic and demonstrated understanding of the need for confidentiality and handling of sensitive information.

Security requirements

You must be able to obtain and maintain a Negative Vetting Level 1 security clearance.

Position location

The OAIC operates a hybrid work model with a combination of remote working and office attendance.  Whilst the OAIC office is located in the Sydney CBD (and preferred), we will consider candidate applications from all other locations within Australia.

The OAIC values face-to-face interaction and fostering connection between our people and with our stakeholders. The OAIC’s hybrid work model expects in office attendance when the type of work or task is better suited to being completed from an office, for example, staff inductions and onboarding, planning days, relationship building activities and project or collaborative work.

Remuneration and benefits

EL2 - $146,700 - $167,421 per annum plus 15.4% superannuation

Note: An employee will generally commence on the base increment point of their relevant classification salary range, unless otherwise agreed by a delegate in consideration of salary matching (existing APS staff) or in recognition of exceptional skills, experience, qualifications or expertise.

Terms and conditions of employment are set out in the OAIC’s Enterprise Agreement 2024-2027.

The OAIC is committed to enabling its people to perform at their best and offers the following benefits:

• Opportunity to work at the cutting edge of privacy and data protection, paving the way for future career opportunities
• Access to ongoing professional development, with a capability framework to guide skill enhancement
• Genuine flexibility to help achieve a balance between work and home life
• Additional paid leave over the Christmas to New Year period as well as access to other leave (e.g. for study or moving)
• Contribution to your wellbeing through subsidies for eye health, flu vaccinations and a wellbeing allowance.

The OAIC is committed to diversity and inclusion. We encourage and welcome applications from people living with disability, Aboriginal and Torres Strait Islander peoples, LGBTIQ+ people, people from culturally and linguistically diverse backgrounds, and mature age people.

Eligibility

• Section 22 of the Public Service Act 1999 requires that APS employees must be Australian citizens.
• There are restrictions on employment of people who have, within the previous 12 months, accepted a redundancy benefit from an APS agency or a non-APS Commonwealth employer.
• For the duration of your employment with the OAIC you will be required to obtain and maintain an Australian Government security clearance as outlined above and meet required background, identification and character checks.
• All duties are to be performed in accordance with the APS Code of Conduct and APS Values and OAIC policies, including Workplace Diversity and Work Health and Safety. Under section 25 of the Public Service Act 1999 the OAIC may re-assign the duties of an employee from time to time.

How to Apply

1. Please complete the application form found at the end of this job pack as part of your submission.
2. Please provide a single page application response (one A4 page-pitch) addressing your interest, motivation and fit for the role. Your pitch should include the use of practical and professional examples as relevant to the role and the job specific capabilities, skills and experience outlined above.
3. Please email your application form, CV (maximum 3 pages) and one-page-pitch to: jobs@oaic.gov.au.
   Please format your email subject line and name your application document(s) as follows:
   First name Last Name - OAIC-2026-013 – EL2 Director, Governance, Risk & Compliance