Qualifications

• Bachelor's degree in Law, Information Management, Business, IT, or related field (or equivalent experience).
• 5+ years of experience in privacy, data protection, compliance, or related roles.
• Strong knowledge of Canadian privacy legislation.
• Experience implementing privacy management programs.
• Legal qualification (LL.B. or J.D.) preferred.
• Privacy certifications such as CIPP/C, CIPP/E, CIPM, or CIPT are a plus.
• Experience with cross-border data protection compliance.

Responsibilities

• Develop, implement, and maintain a privacy management program in line with Canadian privacy laws.
• Monitor legislative and regulatory developments, particularly Law 25 requirements.
• Establish privacy policies, standards, and procedures.
• Maintain records of processing activities and data inventories.
• Provide expert privacy advice to business stakeholders.
• Lead or support Privacy Impact Assessments (PIAs).
• Embed privacy by design and by default into systems and processes.
• Review data sharing agreements and vendor contracts.
• Respond to privacy incidents and data breaches.
• Ensure compliance with mandatory breach notification and reporting obligations.
• Coordinate incident response with internal stakeholders.
• Act as the primary contact for Canadian privacy regulators.
• Manage regulatory inquiries, investigations, and complaints.
• Oversee responses to access and correction requests.
• Develop and deliver privacy training and awareness programs.
• Promote a culture of privacy and accountability.
• Escalate material privacy risks to senior leadership and the Board.

Benefits

• Permanent full-time position.
• Opportunity for remote work from home in Canada.
• Involvement in shaping the organization's data protection strategy.
• Collaborative work environment emphasizing privacy culture.
• Professional independence in decision-making and policy development.