Privacy Officer

Job description

🇦🇺 Heads up! This role is based in-person at our office in sunny Brisbane, Australia. 🇦🇺 –––––––––––––––––––– 🌎 About Askable Askable began in 2017 as an idea scribbled on a sticky note, born out of frustration with clunky, outdated research processes. We saw teams with great ideas being slowed down by poor access to quality research. So we built a better way. Today we partner with some of the world's most ambitious product teams - from Fortune 500s to fast-moving startups - giving them seamless access to participants, researchers, and insights that drive real decisions. With offices in Brisbane, London, and Chicago, we're on a mission to make great research accessible to everyone. –––––––––––––––––––– 🦄 Our culture Our culture drives everything we do. We live it, breathe it, and work every day to make Askable a place where people can thrive. We believe work should be fulfilling, exciting, and meaningful. Here, you’re not just part of a team. You’re part of a community that cares about what they’re building and how they’re building it. –––––––––––––––––––– 💡 About the role Privacy is not an afterthought at Askable - it's part of how we build trust. We're ISO 27001 and ISO 27701 certified, SOC 2 Type II audited, and we operate across Australia, the UK, and the US. That's a real regulatory footprint, and we need someone who genuinely loves this stuff to own it. As our Privacy Officer, you'll run Askable's global privacy program from Brisbane. You'll manage our Privacy Impact Assessments, keep our ROPA and subprocessor register current, field data subject requests that need expert attention, deliver our privacy training program, and work closely with our external DPO consultants in the UK and US. This is an advisory and operational role. You'll drive the work - drafting, assessing, coordinating, training - and escalate outputs to the Technology Services and Information Security Manager for review and sign-off. It's a role with genuine scope, real variety, and room to grow as our program does. –––––––––––––––––––– 🛠 What you’ll do Own the ROPA, subprocessor register, and Vanta privacy controls across all three entities Run Privacy Impact Assessments end-to-end, ahead of new features and processing activities Triage and respond to data subject requests (access, erasure, correction, portability) within statutory timeframes Co-manage the relationship with our UK (Whitaker Solutions) and US DPO consultants Deliver and maintain our annual privacy training program - content creation included Track privacy law developments across the APP, UK GDPR, and US state privacy frameworks and brief the team Support ISO 27701 maintenance: evidence prep, audit readiness, nonconformity tracking Review incoming DPA documentation and flag material concerns to Legal Conduct annual reviews of Askable's privacy policies and notices –––––––––––––––––––– 🦉 Skills and experience you’ll bring You’ll typically bring around 3 years of relevant experience in privacy, data protection, or a compliance role with substantial privacy responsibilities. We’re also open to someone earlier in their career who has strong practical experience and is ready to step up into broader ownership. Hands-on experience delivering Privacy Impact Assessments (PIAs) or Data Protection Impact Assessments (DPIAs), with the confidence to lead assessments with review and support Solid working knowledge of at least one of the Australian Privacy Act / APPs, UK GDPR, or CCPA/CPRA, with exposure to another and the ability to build your knowledge quickly Experience maintaining or contributing to a Record of Processing Activities (ROPA) Practical experience handling data subject requests, including coordinating responses and managing deadlines Clear, precise written communication — you can translate legalese into plain English without losing accuracy Good judgement about what you can progress independently and when to seek specialist advice or escalate a concern Bonus points for: Experience in a SaaS or technology company CIPP/A, CIPP/E, CIPM, or another relevant privacy qualification — including one you’re actively working towards Familiarity with ISO 27701 or supporting a Privacy Information Management System (PIMS) Exposure to Vanta, OneTrust, or a comparable governance, risk, and compliance platform Awareness of the EU AI Act or ISO 42001 — we’re active in this space –––––––––––––––––––– 🚀 The mindset you’ll need Privacy is a detail sport. You're methodical and you take accuracy seriously - but you also know how to communicate risk clearly without triggering unnecessary panic. You're comfortable working across legal, technical, and commercial teams, and you build relationships easily. You can manage a complex workload without losing track of the details, stay current on regulatory developments without being asked, and bring sound judgement and a practical, solutions-focused approach to privacy challenges. You’re ready to take ownership and excited about the room to grow. –––––––––––––––––––– 🙌 Perks and benefits Your excitement about the role itself is what matters most to us. Perks are just the icing on the cake—but let us share a few to whet your appetite. 🍰 AUSTRALIA Competitive salary A vibrant and social work environment Askable Days: a bonus paid day off every month (giving you a total of 7 weeks annual leave ! 🥳) Buffet lunch, every day! Free public transport to get you to and from the office And more! We'll be happy to chat about all our other perks during the interview process. –––––––––––––––––––– ☝️ Before you go... Research shows many people (especially women and minority groups) hesitate to apply unless they meet every single requirement. At Askable, we’re committed to building diverse teams with unique perspectives. If you’re excited about this role but your experience doesn’t align perfectly, we’d still love to hear from you.