Provide privacy advisory services related to Canadian and international privacy laws and frameworks
Understand, assess, and help address clients’ privacy challenges with practical, risk-based solutions.
Conduct Privacy Impact Assessments (PIAs) and privacy risk assessments for new and existing programs, technologies, and initiatives.
Support clients with the design, implementation, and maintenance of privacy management programs, governance frameworks, and operating models.
Advise on both organizational and technical aspects of privacy, including data lifecycle management (collection, use, disclosure, retention, and secure disposal of personal information).
Design and implement privacy strategies tailored to Canadian federal and provincial requirements, with consideration of global obligations and best practices.
Integrate privacy with adjacent domains such as AI governance, cybersecurity, enterprise risk management, and digital transformation to provide holistic client solutions.
Draft, review, and update Privacy Impact Assessments
Draft, review, and update privacy policies, procedures, notices, and supporting documentation.
Develop practical guidance, tools, and templates tailored to client environments and privacy maturity levels.
Support privacy-by-design and privacy-by-default principles in client initiatives, including digital health, research, and emerging technologies.
Contribute to the innovation, development, and continuous improvement of PrivacyWorks methodologies, tools, and service offerings.
Build and maintain strong, trusted relationships with clients and stakeholders through effective communication and delivery excellence.
Work collaboratively with client stakeholders, including legal, IT, security, program leads, clinicians, and senior management.
Translate complex privacy and regulatory requirements into clear, actionable recommendations for both technical and non-technical audiences.
Prepare reports, summaries, and presentations to communicate progress, findings, and recommendations.
Manage and contribute to multiple client engagements concurrently, ensuring deliverables are completed on time and to a high standard.
Track project hours, timelines, and dependencies, proactively identifying and escalating risks or issues.
Proactively support the planning and delivery of client work, ensuring consistent, high-quality outcomes.
Contribute to the continuous improvement of internal processes, tools, and best practices.
Coach, mentor, and support the development of team members by sharing knowledge and experience.
Contribute to the growth of individual and team expertise in privacy, data protection, and emerging areas.
Stay current with evolving regulatory, business, and economic trends impacting privacy.
Strengthen internal collaboration and contribute to the growth and reputation of PrivacyWorks.
Requirements
Bachelor’s degree or relevant industry-specific diploma in a related field (e.g., privacy, law, information management, public policy, or technology).
Five (5) years related experience in privacy, data protection, risk management, or a related field
CIPP/C certification
Other additional designations are highly desirable (CIPM, CIPT, CIPP/EU, CIPP/US, CISSP, etc.)
Formal change management or project management experience is an asset
Artificial intelligence governance experience is an asset
In-depth knowledge of Canadian Privacy legislation on a National and Provincial level.
Proven ability to interpret legislation and regulation and apply to various contexts.
Proven ability to translate complex privacy concepts for non-privacy audiences.
Proven ability to successfully conduct Privacy Impact Assessments, including legislative interpretation and risk identification and analysis.
Knowledge of International privacy laws, including GDPR.
Demonstrated practical experience in supporting organizations implement comprehensive privacy and data protection programs, including privacy program development and management, policy drafting, developing Privacy Impact Assessments, and providing tailored privacy advice.
Strong communication skills and ability to effectively liaise with various client stakeholders including legal, technical, executive, and administrative.