Privacy Compliance Advisor

Privacy Compliance Advisor Reporting to the Director, Information, Privacy & Records Management Office, the Privacy Compliance Advisor plays a key role in supporting the University's accountability and compliance with privacy and access-to-information legislation. The position is responsible for leading privacy impact and risk assessments, investigations, and incident response activities, and for providing expert advice and training to ensure the appropriate handling and protection of personal information across the institution. Working within the framework of provincial and federal privacy laws, University policies, and institutional governance structures, the Privacy Compliance Advisor contributes to the development, implementation, and continuous improvement of privacy compliance measures and information management practices. Location This role is hybrid, with a mix of remote and in-person work. Work primarily takes place at North Campus, Edmonton. Responsibilities Privacy Compliance and Risk Management Conduct privacy risk reviews and privacy impact assessments (PIAs) for new or existing programs, projects, and technologies to ensure compliance with the Office of the General Counsel’s (OGC) privacy policy and applicable privacy and data protection legislation. Evaluate privacy risks associated with data collection, use, disclosure, and storage practices, and provide recommendations for mitigating identified risks. Complete privacy due diligence reviews of third-party vendors and service providers to ensure contractual and operational compliance with privacy standards. Maintain knowledge of privacy risk management frameworks and apply them to new and emerging technologies, balancing innovation with data protection obligations. Privacy Incident Response and Investigation Lead the investigation of privacy breaches and incidents, collaborating with internal and external stakeholders to identify root causes and ensure timely containment and resolution. Conduct assessments of risk of significant harm to affected individuals and make recommendations regarding required notifications or corrective measures. Document investigation outcomes, lessons learned, and provide recommendations to prevent recurrence. Track and report on incident trends to inform proactive compliance strategies. Access to Information Management Administer access to information requests and ensure responses comply with relevant privacy and access legislation. Coordinate with internal units to locate, review, and redact responsive records while maintaining appropriate documentation and timelines. Produce activity reports summarizing request volumes, response times, and compliance metrics for leadership and regulatory reporting. Privacy Advisory and Stakeholder Support Provide specialized privacy guidance to staff, leadership, and project teams at all levels of the organization. Interpret data protection requirements and advise on best practices for the collection, use, disclosure, safeguarding, retention, and disposal of personal information. Act as a trusted advisor for OGC employees and partners, ensuring privacy considerations are embedded in business processes and technology design. Participate in the development and review of institutional privacy policies, standards, and procedures. Training, Education, and Awareness Develop, update, and deliver training programs and educational materials on privacy and information handling practices. Promote a culture of privacy awareness through ongoing communications, workshops, and resource development. Evaluate training effectiveness and adjust materials to reflect legislative changes, institutional policies, and emerging risks. Research, Monitoring, and Continuous Improvement Research privacy and access to information trends, case law, and best practices. Monitor developments in privacy legislation and guidance from regulators to ensure institutional alignment and readiness. Recommend updates to OGC policies and procedures to strengthen compliance and operational efficiency. Support continuous improvement initiatives related to information management and governance. Qualifications A university degree or college diploma in business or a related field. 3-5 years of progressively responsible experience in privacy, information management, compliance, risk management, audit, or a closely related field. Knowledge and practical application of federal and provincial privacy legislation. An IAPP certification and CIPP/ CIPP‑Canada designation are preferred and/or willingness to attain. Superior verbal and written communication skills with the ability to communicate technical and legal information effectively and clearly to a wide variety of audiences. Demonstrated ability to deal effectively and collaboratively with all levels of internal and external stakeholders to achieve privacy compliance requirements. Superior time management and organizational skills to manage multiple accountabilities and competing priorities, with the ability to quickly adapt to unforeseen changes in priorities. Innovative and a self‑starter with good research, analysis and report writing abilities, meeting quality standards and deadlines, and able to develop and implement new policies, procedures and practices. Proficiency in Google Suite (Word, Excel & PowerPoint) and Adobe InDesign software. The ability to communicate in French (verbal and written) is considered an asset. May be required to travel. Application Instructions Please submit your resume and cover letter. About the University The University of Alberta acknowledges that we are located on Treaty 6 territory, and respects the histories, languages and cultures of First Nations, Métis, Inuit and all First Peoples of Canada, whose presence continues to enrich our vibrant community. The University of Alberta is a community of knowledge seekers, change makers and world shapers who lead with purpose each and every day. We are home to over 14,000 faculty and staff, more than 40,000 students and a growing community of 300,000 alumni worldwide. Your work will have a meaningful influence on a fascinating cross-section of people – from our students and community members, to our renowned researchers and innovators, making discoveries and generating solutions that make the world healthier, safer, stronger and more just. Learn more. At the University of Alberta, we are committed to creating an inclusive and accessible hiring process for all candidates. If you require accommodations to participate in the interview process, please let us know at the time of booking your interview and we will make every effort to accommodate your needs. We thank all applicants for their interest; however, only those individuals selected for an interview will be contacted. All University employees have a responsibility to foster a workplace that prioritizes safety in all its forms—physical, cultural, and psychological. This is achieved by promoting a safe environment, adhering to all safety laws, policies and procedures, completing all required safety training, identifying hazards and implementing controls, reporting incidents, and contributing to a culture of belonging and respect, while endeavoring to ensure that all colleagues feel valued and safe to express their thoughts, perspectives and concerns. The University of Alberta is committed to creating a university community where everyone feels valued, barriers to success are removed, and thriving connections are fostered. We welcome applications from all qualified persons. We encourage women, First Nations, Métis and Inuit persons, members of visible minority groups, persons with disabilities, persons of any sexual orientation or gender identity and expression, and all those who may contribute to the further diversification of ideas and the University to apply. Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Finance and Sales Industry Higher Education #J-18808-Ljbffr