Principal Director, Compliance

About the Office of the Australian Information Commissioner

Working with the Office of the Australian Information Commissioner (OAIC) will put you at the forefront of data protection and access to information regulation. As an independent statutory agency, the OAIC’s work is of national significance and plays an important role in shaping Australia’s information handling landscape across the economy - from government, digital platforms and the online environment, to health, finance and telecommunications. Our mission is to uphold and promote Australia’s privacy and freedom of information laws.

We are an agency within the Attorney-General Department’s portfolio with responsibility for numerous statutory functions including:

• privacy functions under the Privacy Act 1988 and the Digital ID Act 2024, the My Health Records Act 2012 and in relation to the Consumer Data Right (CDR) under the Competition and Consumer Act 2010, in particular, investigating breaches, handling complaints, conducting audits, developing codes, providing policy guidance and educating the public and industry on privacy;
• freedom of information functions under the Freedom of Information Act 1982, in particular, review of decisions made by agencies and ministers, handling FOI complaints, monitoring and investigating agency compliance, providing policy guidance and educating government and the public on FOI rights; and
• information commissioner functions under the Australian Information Commissioner Act 2010 including reporting to the Minister regarding government policy and practice with respect to the collection, use, disclosure, management, administration or storage of, or accessibility to, information held by government and the systems used.

Leadership roles in the OAIC

Leadership within the OAIC work as a united team, collaborating and supporting each other and staff in achieving outcomes for the Australian community, and ensuring the agency’s success.

You will demonstrate leadership that aligns with the values of the OAIC, which include:

• modelling and championing the OAIC’s Guiding Principles (‘4 Pillars’): being proactive, proportionate, purpose-driven and people-focused
• acting with integrity at all times and demonstrating alignment with the APS Values: Impartial, Committed to service, Accountable, Respectful, Ethical and Stewardship
• managing limited resources effectively and aligned to the OAIC’s regulatory priorities
• empowering and supporting staff to make lawful administrative decisions in accordance with the applicable statutory framework
• leading your team and directly contributing to communicating (internally and externally) and delivering on the strategic direction of the OAIC

About The Role

The Principal Director, Compliance provides leadership to the Compliance Team within the Regulatory Action Division (RAD) which contains teams conducting proactive compliance activities, develops and implements strategic compliance strategies, and ensures the OAIC’s proactive compliance regulatory action is consistent, proportionate and effective.

Reporting to the Executive General Manager, Regulatory Action (EGM RAD), this role translates the agency’s and RAD’s strategic priorities as they relate to proactive compliance into operational plans, manages resources to achieve maximum impact, and builds team capability to deliver quality and timely regulatory outcomes. The position plays an essential role in positioning the OAIC as an effective and trusted regulator by ensuring compliance regulatory activities are targeted to address the most significant privacy and information access risks to the Australian community.

Key responsibilities of the role include the following:

• Managing the Compliance Team, providing leadership, direction and support working in a fast-paced, high workload environment.
• Supervising teams responsible for strategic and proactive compliance activities to reduce harms to the community caused by information rights violations including by supervising:
  • proactive compliance activities and monitoring functions under the AIC Act, FOI Act and Privacy Act;
  • all statutory and funded assessment work carried out by the OAIC;
  • supervising all complex notifiable data breach matters notifications made to the OAIC, including preparation of assessments and recommendations to the Privacy Commissioner on appropriate regulatory action; and
  • monitoring and ensuring compliance with all determinations handed down by the OAIC and any Enforceable Undertakings entered into.
• Enhancing operational prioritisation processes and implementing new ways of working across the Team and supporting the EGM RAD in enhancing such practices across RAD.
• Providing oversight and leadership to the Compliance Team and as part of the leadership of RAD, enhancing approaches to delivery (including by developing Compliance Team capability in proactive assessment, resource management, methodology and report writing) while balancing competing demands on resources and engaging with risk to deliver the best compliance outcomes for the community and positioning the OAIC for the future.
• Working closely with the EGM RAD, GM Investigations & Enforcement, other OAIC executives and the OAIC’s Commissioners to develop, communicate, implement, evaluate and refine the OAIC’s regulatory strategy.
• From time to time, representing the OAIC publicly with external stakeholders.
• Ensuring the OAIC’s compliance activity is targeted and strategic and applied in a way that advances the community’s information rights and the OAIC’s regulatory priorities.
• Providing strategic input into evaluation of the effectiveness of regulatory policies, operational frameworks and guidelines.
• Effectively overseeing and providing advice to the EGM RAD and Commissioners regarding the expenditure of funds to support compliance work.
• Developing and overseeing compliance strategies to deliver impactful, timely and proportionate outcomes that promote and protect privacy and information access rights.
• Developing and nurturing a high performing, multidisciplinary, collaborative and innovative culture within the Compliance Team that is aligned with OAIC’s guiding principles.
• Supporting the EGM RAD and Commissioners in maintaining critical stakeholder relationships including across government, in academia, the private sector and the Minister’s Office and ensuring Compliance Team members are engaging effectively with stakeholders, positioning the OAIC as a trusted regulator.
• Supporting the EGM RAD to establish and drive strategic agendas that align with and supports the Commissioners’ priorities and agency purpose.
• Providing timely reporting and visibility of the progression of compliance activities being undertaken by the Compliance Team.
• Other duties as required.

Job Specific Capabilities, Skills & Experience

We are seeking applications from candidates who have:

• Demonstrated experience managing large teams
• Demonstrated experience delivering extensive work programs
• Expertise in managing assessment, audit, or compliance teams, preferably within the regulatory, government, or privacy sectors
• Strong written and verbal communication skills, with the ability to provide clear advice and articulate well-reasoned recommendations
• Experience in delivering risk-based strategic programs, including scoping, briefing, and reporting
• Demonstrated ability to maintain a high level of integrity and act in accordance with the APS Values and Code of Conduct at all times.

These duties are to be performed in accordance with the APS Code of Conduct and APS Values and Office policies, including Workplace Diversity and Work Health and Safety. Under section 25 of the Public Service Act 1999 the Office may re-assign the duties of an employee from time to time.

Security requirements

You must be able to obtain and maintain a Negative Vetting Level 1 security clearance.

Position location

The OAIC operates a hybrid work model with a combination of remote working and office attendance.  Whilst the OAIC has offices located in the Sydney CBD and Canberra (preferred locations), we will consider candidate applications from all other locations within Australia.

The OAIC values face-to-face interaction and fostering connection between our people and with our stakeholders. The OAIC’s hybrid work model expects in office attendance when the type of work or task is better suited to being completed from an office, for example, staff inductions and onboarding, planning days, relationship building activities and project or collaborative work.

Remuneration and benefits

Salary may be negotiated with the successful candidate commensurate with EL2 work level standards.

The OAIC is committed to enabling its people to perform at their best and offers the following benefits:

• Opportunity to work at the cutting edge of privacy and data protection, paving the way for future career opportunities.
• Access to ongoing professional development, with a capability framework to guide skill enhancement.
• Genuine flexibility to help achieve a balance between work and home life.
• Paid leave over the Christmas to New Year period as well as access to other leave (e.g. for study or moving).
• Contribution to your wellbeing through subsidies for eye health, flu vaccinations and a wellbeing allowance.

The OAIC is committed to diversity and inclusion. We encourage and welcome applications from people with disability, Aboriginal and Torres Strait Islander peoples, LGBTIQ+ people, people from culturally and linguistically diverse backgrounds, and mature age people.

Eligibility

• Section 22 of the Public Service Act 1999 requires that APS employees must be Australian citizens.
• There are restrictions on employment of people who have, within the previous 12 months, accepted a redundancy benefit from an APS agency or a non-APS Commonwealth employer.
• For the duration of your employment with the OAIC you will be required to obtain and maintain an Australian Government security clearance at the Negative Vetting Level 1 and meet required background, identification and character checks.
• Note: All duties are to be performed in accordance with the APS Code of Conduct and APS Values and OAIC policies, including Workplace Diversity and Work Health and Safety. Under section 25 of the Public Service Act 1999 the OAIC may re-assign the duties of an employee from time to time.

How to Apply

1. Please complete the application form found at the end of this job pack as part of your submission.
2. Please provide a statement of claim of up to 2 A4 pages, addressing your interest, motivation and fit for the role. Your statement should include the use of practical and professional examples as relevant to the role and the job specific capabilities, skills and experience outlined above.
3. Your application form, CV and statement of claim should be collated as one document (where possible) and sent in a single email to: jobs@oaic.gov.au.  Please ensure your email includes your full name in the email subject field, along with the job reference number found on the front page of this pack.