Data Governance Manager

We are seeking an experienced professional to lead our Cybersecurity, Information Assurance, and Data Protection team.

This is a unique opportunity to help shape how data and information security is delivered across the organisation, protecting sensitive information and building trust in the services that support students, teachers, and the community.

You will have the opportunity to influence strategy, implement robust information security and data governance practices, and ensure cybersecurity is fully aligned with the business and technology objectives.

• Provide strategic oversight of cybersecurity, privacy, and data governance, aligned with the business and technology goals.
• Foster a culture of security and privacy awareness across the organisation and embed secure practices.
• Oversee records and information governance in line with relevant legislation and retention requirements.
• Drive the adoption of enterprise data governance frameworks, including classification, stewardship, access controls, and accountability models.
• Develop and implement a cybersecurity roadmap, overseeing architecture and maturity assessments.
• Monitor and manage cyber/data risks, maintaining risk registers, conducting assessments, and reporting to executive leadership.
• Develop and sustain security and privacy policies and governance structures aligned with industry best practices and regulatory requirements.
• Build strong relationships with senior stakeholders, government agencies, and regulators to ensure compliance and best practice.
• Translate complex cybersecurity, privacy, and governance challenges into risk-based, practical advice for business leaders.
• Provide clear and regular reporting to the executive team and board-level stakeholders.

• Experience overseeing security frameworks such as ISO 27001 and Essential Eight, as well as data protection and enterprise data governance.
• Knowledge of privacy legislation, including NSW PIPA 1998, HRIPA, and the Privacy Act 1988, with involvement in managing breach notifications and privacy governance.
• Background in leading change and contributing to improvements in cybersecurity and privacy capability within complex environments.
• Senior-level experience advising executives and driving outcomes in large or complex organisations.
• Strong stakeholder engagement skills, with the ability to influence and balance competing priorities.
• Leadership skills to guide, develop and drive performance in high-performing teams.
• Strong stakeholder management expertise, with experience navigating government processes.
• Demonstrated experience at a senior level providing authoritative advice to executive leadership.
• Tertiary qualifications in a relevant discipline or equivalent professional experience.

• Ongoing, full-time opportunity.
• Close to Wynyard station & hybrid work arrangements available.

We are committed to working with the community to drive improvements in student achievement.

We achieve this by supporting all school sectors with high-quality syllabuses, assessment, teaching standards, and school environments.

To find out more about our important work, visit our website.

Select apply and attach an up-to-date résumé (maximum 5 pages) and a cover letter (maximum 2 pages).

Please address the 2 targeted questions below in your online application:

• This role requires leading the integration of privacy, data protection, records management and cybersecurity functions, while ensuring compliance with strict legislative and regulatory requirements. Provide an example of a time when you successfully managed a complex privacy, cybersecurity, or information governance challenge.
• This role leads and develops a team while building strong collaborative relationships across our organisation, other government agencies, and external stakeholders. Describe a situation where you led a team or project to deliver a significant organisational or technology-related change.