Privacy & Risk Consultant

Lead a high-impact risk and governance initiative within a large enterprise environment.

Senior Consultant Third Party Data Risk & Privacy
Sydney | 6-Month Contract | Up to $1,100 per day + Super | Hybrid Working

We're seeking an experienced risk, advisory or consulting professional to join a high-profile Privacy Resilience Program within a large and complex organisation.
This is a unique opportunity to tackle a significant privacy and data risk challenge involving sensitive information, third-party platforms and software solutions across a diverse technology environment.
An independent assessment has already been completed, identifying risks and opportunities for remediation. The challenge now is determining what should be addressed, what can realistically be addressed and how the organisation should prioritise and approach remediation activities in a practical and sustainable way.
This role is not about delivering remediation. It is about defining the path forward.

The Opportunity
Working closely with senior leaders, you will take the findings of an existing risk assessment and transform them into a structured, risk-based and achievable program of work.
Your role will be to assess the findings, refine the scope, challenge assumptions where appropriate and determine how the organisation can most effectively reduce risk. This will involve balancing privacy, data and third-party risk considerations against organisational capability, effort, cost and business priorities.
Success in this role will come from your ability to take a large and complex problem, break it down into manageable components and create a practical roadmap that improves the organisation's overall risk posture.

Key Responsibilities

• Refine and prioritise remediation scope across third-party platforms and software solutions.
• Assess privacy, information management and third-party risks and determine where remediation efforts should be focused.
• Develop a risk-based methodology for evaluating and prioritising remediation activities.
• Create frameworks and governance approaches that support effective decision-making.
• Conduct root cause analysis and identify practical opportunities to reduce risk.
• Develop clear workstream plans, recommendations and execution roadmaps.
• Define deliverables, outcomes and prioritisation criteria that can be endorsed through governance channels.
• Translate complex risk findings into practical and achievable business recommendations.

About You
You have experience assessing and managing risk, developing frameworks or methodologies and helping organisations navigate difficult decisions where there is no obvious solution.
You may come from a background in:

• Third Party Risk Management
• Vendor Risk Management
• Information Risk Management
• Data Risk Management
• Privacy and Regulatory Compliance
• Governance, Risk & Compliance (GRC)
• Cyber Risk Management
• Risk Advisory or Management Consulting

You will ideally bring:

• Experience developing frameworks, methodologies and governance models.
• Strong analytical and problem-solving capability.
• Experience making risk-based recommendations and decisions.
• The ability to simplify large, complex problems into manageable and achievable bodies of work.
• Experience working within large and complex organisational environments.

Why This Role?
This is an opportunity to lead a highly specialised piece of work that will directly influence how a major organisation approaches privacy, data and third-party platform risk moving forward.

What to do Next?
If you have experience applying risk-based thinking to complex privacy, data or third-party technology challenges and can bring structure, prioritisation and clarity to large-scale remediation problems, we'd welcome a confidential discussion.
Please apply now and share an updated resume to Reece.Perkins@hays.com.au
#3018685