POSITION OVERVIEW:Reporting to IT, this role will support legal and compliance requirements related to privacy laws and overall data protection best practices. To this end, the role will assist with the ongoing administration and use of a consent management system, maintenance of a data inventory as well as operationalizing data protection requirements as necessary. The role will also support data protection tasks within security operations as required. This is an existing vacancy, and this position is a hybrid role based in Toronto.
RESPONSIBILITIES:- Assist with data protection activities including, the administration of a consent management system, maintenance of a data map, conducting privacy impact and vendor risk assessments, overseeing individual rights requests, and operationalizing privacy and security requirements as necessary.
- Support the continuous improvement of, and maintenance of, data protection tools, policies, standards, templates, and procedures.
- Work collaboratively with cross functional partners (Cybersecurity/Technology/Legal/Operations) to initiate privacy and security processes and ensure data protection requirements are met.
- Integrate data protection into other governance processes and assist in the development of intake channels that alert privacy and security when appropriate (vendor governance, technical project delivery process, data governance processes).
- Develop and deliver team specific training and guidance to internal audiences for new controls and processes.
QUALIFICATIONS:- At least 5 years of relevant privacy and data governance experience.
- A post-secondary degree in related field or combination of education and experience with continuing professional development in privacy and information security risk.
- Knowledge of Canadian data privacy laws and best practices.
- Experience with data protection activities such as data mapping, privacy impact assessments and vendor risk assessments.
- Project and/or program management experience.
- Familiar with risk management and compliance and able to provide guidance on related matters, including application of policies and procedures.
- Familiar with technology systems and architecture as it applies to data, e.g. databases, cloud systems, technical integrations, data flows, privacy enhancing technologies and techniques and security controls.
- Strong leadership skills and ability to communicate clearly and concisely at all levels within an organization.
Helpful to have but not required:- Experience with privacy, data and security investigations.
- Experience with consent management systems, vendor risk assessments, PCI compliance, or GRC (Governance, Risk, Compliance).
- Knowledge of international privacy laws and emerging data and AI governance expectations.
- Privacy/data protection or security risk management certifications such as CIPP, CIPM, CDPSE, or CRISC.
SALARY: The base salary for this role ranges from $107,600 to $123,800 per year. Placement within this range depends on a candidate's level of experience, technical skills, and alignment with the role's requirements. Candidates who have been identified as meeting the role's requirements can expect to be near the midpoint of this range, while the upper end is reserved for those with specialized expertise or a strong track record of success in comparable roles. This role may be eligible for The Globe's Annual Incentive Plan, which is based on a combination of corporate and revenue objectives and rewards individual performance.
WE OFFER:- Competitive compensation to ensure we hire, retain and reward team members
- Hybrid work environment that promotes work-life balance
- Generous vacation and flexible work arrangements
- Parental leave top-up
- Competitive health and dental benefits
- Defined Benefit pension plan
- Annual wellness subsidy
- On-site chiropractor and registered massage therapist
- Employee and family assistance program
- Free digital subscription to globeandmail.com and 40% off other Globe products
- Education assistance for external training courses
SUPPORTING YOUR GROWTH: - We are committed to creating equitable opportunities for all employees, to enable everyone to reach their full potential. This commitment is embedded in our strategic plan and core values.
- There are lateral and upward advancement opportunities for rewarding and developing careers.
- We believe in mentorship and collaborative peer-to-peer learning and have both formal and informal programs in place to encourage knowledge-sharing.
- We support continuing education and provide both internal and external opportunities for training and development.
AI DISCLOSURE: Artificial intelligence tools may be used to support certain aspects of the recruitment process, such as candidate sourcing or application review. All employment decisions, including interview selection and hiring outcomes, are made by human reviewers. We ask candidates to engage authentically in interviews; AI may support preparation but should not be used during interviews or replace your own responses.
