Our Opportunity

Location: Perth - Fortescue’s Perth office is located on the traditional lands of the Whadjuk people.

Roster: Monday to Friday

Reporting to the Superintendent Cyber Risk Advisory, the Data Protection Lead is responsible for leading Fortescue's global data protection capability. The role develops and governs enterprise-wide data protection strategies, frameworks and controls to safeguard information assets, ensure regulatory compliance and support business objectives.

Working closely with senior business and technology leaders, you will drive best-practice data protection across Fortescue's global operations while leading a team that embeds secure and effective information management practices.

Key Responsibilities

• Lead Fortescue's Enterprise Data Protection Program by developing and maintaining the global data protection strategy, framework, governance, standards and roadmap aligned with business objectives and regulatory requirements.
• Provide governance and oversight of Data Loss Prevention (DLP), Insider Risk Management, data classification, information lifecycle management, data sovereignty and cross-border data transfers.
• Manage data protection risk and compliance by assessing business, technology and third-party risks, ensuring compliance with applicable privacy legislation, regulatory obligations and industry frameworks.
• Support data breach preparedness and response, including privacy impact assessments, regulatory notifications, incident investigations and continuous improvement activities.
• Manage third-party data protection risk by establishing data protection requirements and supporting supplier risk assessments and contractual obligations.
• Act as Fortescue's trusted advisor on data protection, partnering with business and technology stakeholders to translate business requirements into practical, risk-based information protection solutions.
• Provide executive reporting and assurance by monitoring data protection performance, emerging risks, regulatory developments and the effectiveness of enterprise data protection controls.

Qualifications and Experience

• Extensive experience leading enterprise data protection, privacy or information governance programs within large, complex organisations.
• Proven ability to develop and implement data protection governance frameworks, policies, standards and operating models.
• Strong expertise in data classification, information lifecycle management, Data Loss Prevention (DLP) and insider risk management.
• Experience managing data breaches, regulatory reporting and third-party data protection risks across cloud and global environments.
• Demonstrated ability to influence senior stakeholders and lead cross-functional teams across technology, legal, risk and business functions.
• Strong knowledge of Australian Privacy Act, GDPR, ISO 27701, ISO 27001, NIST Privacy Framework and related regulatory requirements.
• Experience with Microsoft Purview, DLP, Insider Risk Management, Data Security Posture Management (DSPM) and emerging AI governance practices.
• Experience within mining, resources, energy or other highly regulated industries, supporting global operations and digital transformation initiatives

About Us

Be part of something big. Fortescue is leading the world with our plan to decarbonise our iron ore operations, projects that harness renewable energy and the development of technology that will change our planet forever.

Our Commitment

Fortescue celebrates individual strengths and team members are encouraged to bring their whole selves to work. Our global workforce drives and promotes an inclusive culture, both within our organisation and throughout the communities we interact with. Diverse backgrounds include First Nations Peoples, people with disabilities, LGBTQ+ community, gender, neurodiverse, cultural diversity, all age groups, and those with an intersectional or multiple diverse characteristics. We encourage candidates from all backgrounds to apply.

https://fortescue.com/careers 

Internal Candidates / Current Contractors please apply via Success Factors Careers Portal. For further information on how to apply please visit the Fortescue Hub. 

Fortescue reserves the right to close applications early should a suitable pool of candidates be identified. Fortescue will never contact you to ask for payment of any kind, whether directly or through a third party.