Cybersecurity, Data and Privacy Lawyer

• Provide strategic and operational legal advice on privacy, cyber security, data protection, information governance and technology matters
• Advise on the collection, use, disclosure, storage, sharing, retention and protection of personal, sensitive and health information
• Support responses to cyber incidents, privacy complaints and suspected or confirmed data breaches
• Advise on regulatory notification and reporting obligations arising from cyber and privacy incidents
• Advise on privacy impact assessments and data protection for new systems, technologies, services and models of care
• Support digital transformation initiatives involving artificial intelligence, virtual care, data analytics, cloud platforms and emerging healthcare technologies
• Draft, review and negotiate privacy, data security, confidentiality and cyber-related provisions in commercial and technology contracts
• Partner with procurement, technology and operational teams on IT agreements, software and cloud arrangements, vendor engagements and data-sharing agreements
• Monitor legislative and regulatory developments and translate requirements into practical guidance
• Develop and review privacy notices, consent materials, policies, procedures, contractual templates and governance documents
• Build relationships with executives, divisional leaders, clinicians, technology teams and external stakeholders
• Collaborate with the National Legal team and contribute specialist knowledge to corporate, commercial, regulatory and risk matters

Requirements

• Tertiary qualification in law
• Admission as a Solicitor or Barrister in the Supreme Court of New South Wales or Victoria
• Eligibility to hold a New South Wales or Victorian practising certificate without supervision requirements
• Relevant post-qualification legal experience gained within a major law firm, specialist practice, government agency or in-house legal team
• Demonstrated experience in privacy and data protection, cyber security and data breaches, information governance, technology and digital contracting, artificial intelligence and emerging technologies, or regulatory compliance
• Ability to provide timely and practical advice at strategic and operational levels
• Sound judgement balancing legal, regulatory, commercial, clinical and reputational considerations
• Strong drafting and negotiation skills relating to technology, privacy, confidentiality, data-sharing and cyber security provisions
• Highly developed written, verbal and interpersonal communication skills
• Ability to explain complex legal and technical matters to non-legal audiences
• Strong planning and organisational skills, including prioritising urgent matters and meeting competing deadlines
• Self-directed, flexible and collaborative working style
• Confidence working autonomously while contributing to a connected national team
• Commitment to St Vincent's values and understanding of social and ethical considerations associated with health information and healthcare delivery
• Experience in healthcare, aged care, financial services, government, technology, telecommunications or another highly regulated sector highly regarded
• Satisfactory identification, right-to-work, reference and nationally coordinated criminal history checks
• Compliance with applicable St Vincent's Health Australia policies and screening requirements

Core Competencies

Demonstrates expertise in providing strategic and operational legal advice on privacy, cyber security, and data protection, with strong drafting and negotiation skills in technology and data-sharing agreements. Capable of navigating complex regulatory environments and translating legal requirements into practical guidance.

Highest-signal resume keywords

• Privacy And Data Protection
• Cyber Security
• Regulatory Compliance
• Drafting And Negotiation Skills
• Healthcare Sector Experience

Hard Skills

• Legal Advice
• Data Protection
• Information Governance
• Privacy Impact Assessments
• Cyber Incident Response
• Digital Contracting
• Artificial Intelligence
• Data Analytics
• Cloud Platforms
• Regulatory Notification

Soft Skills

• Interpersonal Communication
• Sound Judgement
• Organisational Skills
• Collaboration
• Self-Directed

Certifications & Qualifications

• Solicitor Admission
• Barrister Admission
• Practising Certificate Eligibility

Industry Keywords

• Healthcare
• Aged Care
• Financial Services
• Government
• Telecommunications

Tools & Technologies

• Cloud Platforms
• Data-Sharing Agreements
• Technology Contracts
• Privacy Notices
• Governance Documents