Data Security & Governance Officer

Minor Hotels Australasia is looking for an experienced Data Security & Governance Officer to lead the organisation's data security, privacy, and governance strategy across the enterprise. This is based at our Brisbane City Head Office, with a balance of compliance, risk management, and business enablement. You will play a key role in protecting organisational data, establishing governance frameworks, improving data quality, ensuring regulatory compliance, and reducing enterprise data risk. Working closely with IT, Legal, Risk, Compliance, and Business Stakeholders, you will drive the secure, compliant, and responsible use of data across the organisation while supporting business objectives and operational excellence.

Responsibilities

Lead the organisation's data security, privacy, and governance initiatives across the enterprise; Develop and enhance governance frameworks covering data ownership, classification, lifecycle management, and protection; Establish policies, standards, and procedures for data governance, privacy, and information protection; Ensure compliance with regulatory obligations, privacy legislation, and relevant industry standards; Identify, assess, and mitigate data-related risks across the organisation; Implement privacy and compliance initiatives including Privacy by Design, Data Protection Impact Assessments, risk assessments, and control reviews; Translate regulatory and legal requirements into practical governance processes and operational controls; Oversee third-party and vendor data governance requirements, including due diligence and compliance assurance; Implement and manage the organisation's Data Governance Management System across ANZ operations; Drive improvements in data quality, integrity, lifecycle management, and governance maturity; Deliver training, awareness, and education programs to strengthen governance capability across the business; Provide strategic advice and reporting to senior leadership on governance maturity, compliance, and enterprise data risk

Requirements

Degree qualifications in Information Management, Cyber Security, Data Governance, Risk Management, or a related discipline (or equivalent experience); Demonstrated experience in data governance, privacy, information security, and data lifecycle management; Strong knowledge of regulatory frameworks including Australian Privacy Principles (APPs), New Zealand Privacy Law, and GDPR; Experience implementing governance frameworks, policies, standards, and enterprise-wide controls; Understanding of IT systems, data architecture, and security frameworks such as ISO 27001, NIST, and PCI DSS; Proven ability to identify and resolve complex governance, compliance, and risk challenges; Strong stakeholder engagement and influencing skills, including experience working with senior leaders; Ability to communicate complex technical and regulatory concepts to both technical and non-technical audiences; Strong analytical, problem-solving, and organisational capabilities; Ability to balance strategic leadership with hands-on delivery and implementation; Working rights within Australia or New Zealand; Travel between Brisbane and Sunshine Coast offices will be required on an ad hoc basis

Benefits

Career growth: learning and development programs; Exclusive hotel deals: 50% off stays at Minor Hotels in Australasia; 20% off for friends and family; Global perks: international accommodation discounts across hotel brands; Retail rewards: cashback and discounts at 400+ top retailers in AU/NZ; Experiences: discounted entertainment and activities; Banking and insurance: exclusive health insurance offers and workplace banking benefits; Generous leave: parental and birthday leave; Wellness boost: EAP and tailored wellness support