Looking for a job

Phil Dixon

@phildixon

Privacy and data protection leader at National Australia Bank, simplifying global privacy governance and DPIA processes across six markets.

Brazil

Message

What I'm looking for

I’m seeking a remote or hybrid role, available across Americas, European and Asia-Pacific time zones.

At National Australia Bank, I lead global privacy operations and serve as Enterprise Data Protection Officer, with statutory DPO responsibilities for Singapore, the UK and the EU. I oversee privacy governance across the US, EU, UK, Singapore, China and Japan.

At NAB, I streamlined data protection impact assessments to reduce processing time and manual handling, and set enterprise privacy risk and control requirements, including for data retention. I also assess major data protection incidents and manage regulator contact across jurisdictions.

At Commonwealth Bank of Australia, I co-led most workstreams in a $100 million-plus program responding to an enforceable undertaking with the Office of the Australian Information Commissioner. I also co-founded the Group Privacy Office and built its privacy risk and compliance framework.

Earlier at CBA, I partnered with agile product squads on risk for digital banking, payments and Open Banking, and contributed to the delivery of CBA’s first CommBank mobile banking app. My experience also includes privacy compliance and communications at OAIC and governance, strategy and operations roles in Australian government agencies.

Experience

Work history, roles, and key accomplishments

Current

Head of Global Privacy Operations, Enterprise Data Protection Officer (DPO)

Current

National Australia Bank

Jan 2023 - Present (3 years 9 months)

Key adviser to the Chief Privacy & Data Ethics Officer and the Chief Information Security & Technology Officer; statutory Data Protection Officer for Singapore, the UK and the EU. Led privacy and data protection governance, oversight and operations across the US, EU, UK, Singapore, China and Japan.

Privacy Program Management Privacy Impact Assessment Data Retention Risk Register Regulatory Change Incident Management AI Governance Stakeholder Management Board Reporting

Executive Manager Privacy, Group Privacy Office

Commonwealth Bank of Australia

Jan 2019 - Dec 2023 (4 years 11 months)

Senior second-line leader shaping the group privacy strategy and risk and compliance framework during regulatory enforcement. Co-led the design, execution and oversight of the majority of workstreams in a $100 million+, multi-year program responding to an enforceable undertaking with the OAIC.

Privacy Strategy and Advisory Risk And Compliance Regulatory Remediation Obligation Management Risk Control Self Assessments (RCSAs)Line 1 and Line 2 Operating Models Training

Senior Manager Privacy, International Financial Services

Commonwealth Bank of Australia

Jan 2018 - Dec 2018 (11 months)

Sole privacy subject matter lead to the enterprise GDPR implementation program, covering lawfulness, consent, data subject rights and notification. Designed the foundation for a group-wide privacy-by-design methodology and a program to assess GDPR compliance across the group.

GDPR Privacy By Design Compliance Assessments Risk Reporting remediation

Operational Risk Manager, Digital (Line 1)

Commonwealth Bank of Australia

Jan 2015 - Dec 2018 (3 years 11 months)

Embedded with agile product squads as Line 1 risk partner to product managers, writing risk and control requirements into user stories and acceptance criteria. Led risk identification, assessment and management across delivery of CBA's first CommBank mobile banking app, NetBank internet banking platform and public website.

Agile Delivery Risk And Controls Fraud Control Authentication Payments NPP PayID Osko Open Banking AML CRS FATCA Compliance Control Monitoring

Privacy Advisor, Digital Protection Group

Commonwealth Bank of Australia

Jan 2015 - Dec 2015 (11 months)

Co-founded the group's inaugural Data Protection function and technical security engagement model, and led privacy engagement across the bank's Digital division. Co-built the group's privacy advisory framework, including tools, processes and governance.

Privacy Advisory Data Protection Governance Security Engagement

Governance Officer, Planning, Audit and Risk

NSW Office of Environment and Heritage

Jan 2014 - Dec 2015 (1 year 11 months)

Supported governance, planning, audit and risk activities for a state government agency.

Governance Planning Audit Risk

Senior Manager, Strategy & Operations

Australian Children's Education and Care Quality Authority

Jan 2012 - Dec 2014 (2 years 11 months)

Founding team member of Australia's first national early childhood education and care regulator, converting new national law into operational processes.

Strategy Operations Regulatory Guidance Implementation