Principal Information Officer Privacy

As Principal Information Officer (Privacy) you will be responsible for providing expert advice and input in the development of Privacy Information Management strategies particularly as it relates to the identification, classification, handling, storage and deletion of Personally Identifiable Information (PII).

You will be developing and reviewing policies and procedures related to privacy information management and will be a part of a team who are improving governance and processes related to managing information assets, information security and data breach responses and threats.

This is your opportunity to be a champion for protecting personal information, providing expert advice and guidance according to legislation, using best practice and Australian and internationally recognised standards.

We want you to be a part of a team that is making a difference by ensuring that DSDIP has agile service delivery that, delivers legislative compliance, supports evidence-based decision making, and a Privacy Information Security Governance framework that supports the protection of the confidentiality, integrity, and availability (CIA) of the department's information.

As the Principal Information Officer (Privacy), your responsibilities will be:

Provide expert advice and input to the development of the department's ICT Governance, and Privacy Information Management strategies particularly as they relate to the identification, classification, handling, storage and deletion of Personally Identifiable Information (PII).
Work with key stakeholders to coordinate the development and management of a Mandatory Data Breach Response Plan and relevant Information Privacy Policies and Procedures for the department.
Develop processes and procedures related to Privacy Impact Assessments of new ICT initiatives to support a privacy by design approach to business processes and systems.
Provide advice and recommendations to ensure privacy compliance for departmental initiatives.
Work with ITS Leadership, and various groups including Integrity and Workplace Relations, and Legal Services in leading compliance with Information Privacy and Other Legislation Amendments (IPOLA).
Review personal information handling practices of the department to assess departmental compliance.
Use of tools to monitor, maintain and improve data classification across the network.
Work collaboratively with the ITS Cyber Security team to ensure security controls and processes are aligned to protect personal information.
Foster a Privacy-aware culture across the department through the development of training and awareness packages related to information privacy and cyber security.
Uplift capability, knowledge and awareness of Privacy across the department through developing and implementing a communication plan.
Manage and maintain the department's Information Asset Register and Open Data Strategy.
Perform other tasks as required by the Manager, Director, and CIO.


Applications to remain current for 12 months.

Job Ad Reference: QLD/62556+/25

Closing Date: : Tuesday, 25 March 2025

Occupational group Information Management/Library Read more