Data Privacy Analyst

About Vanguard

More than 45 years ago, John C. Bogle had a vision to start an investment company that did things differently. A company with no external shareholders. Where all the profits were invested back into the business and used to lower costs. Evidently, it was as bold as it was brilliant. To this day, Vanguard Group still has no external shareholders. That means no share prices to protect, and no profits to generate for outside owners.

Today, Vanguard is one of the world's largest investment management companies, serving more than 50 million investors worldwide. For more than 30 years Vanguard Australia has been supporting individual investors, financial advisers, and superannuation members to achieve their long-term financial goals.

Core Responsibilities

• Serves as a subject matter expert on relevant data privacy laws and regulations, with expertise in the Australian Privacy Act 1988 (Cth) and an interest in emerging technologies and regulatory risks related to data and privacy.

• Supports the Head of Data Privacy to ensure compliance with privacy laws and performs risk assessments as needed, including Privacy Impact Assessments.

• Consults with business partners and provides oversight to enable a Privacy by Design approach.

• Contributes to the maintenance and evolution of the privacy program framework, including the design and development of policies, standards, and procedures.

• Monitors the industry to identify emerging privacy risks that could impact the organisation.

• Engages with business leaders to support the implementation of data privacy policies and procedures as well as assess data privacy and related risks, with the objective of mitigating potential privacy incidents.

• Contributes to the global privacy incident control and response framework.

• Supports privacy-related forums and trainings.

• Implements processes to ensure compliance with pending regulatory requirements.

• Collaborates with other teams including legal to implement new requirements.

• Actively identifies opportunities to develop metrics to build program measures and provide insights to management across the enterprise.

• Participates in special projects and performs other duties as assigned.

• Relevant work experience in risk, compliance or regulatory roles, preferably within the financial services industry.

• CIPM certification preferred. Other IAPP certifications including AIGP or equivalent a plus.

• An undergraduate degree or an equivalent combination of training and experience is required.

• Strong stakeholder management skills with the ability to influence, prioritise, and communicate risks clearly in plain English.

• Ability to interpret and apply privacy requirements to real-world business processes, systems, and data flows.

• Strong administrative, organisational, program management, and presentation skills, with attention to detail and a practical, outcome-driven mindset.

• Experience with privacy management tools such as OneTrust is a plus.