Chief Privacy Officer

**CHIEF PRIVACY OFFICER** **WINNIPEG, MB** Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers **_ Great Benefits_** - Competitive salary and benefits package. - Defined-benefit pension plan. - Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life - and community. - Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on nature of work, operational requirements and work location. Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation, commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace. Reporting to the General Counsel and Corporate Secretary, the Chief Privacy Officer is responsible for ensuring that Manitoba Hydro complies with applicable legal standards and requirements respecting protection and security of private confidential information (which includes, without limitation, personal information and personal health information for the purpose herein) as defined in applicable legislations and regulations. **_ Responsibilities:_** - Responsible for the development, implementation, operation, management, and continuous improvement of an enterprise privacy program to enable consistent and effective practices at Manitoba Hydro (the "Program"). The Program should consist of policies, procedures, safeguards and controls, training, investigations and other means to ensure compliance by Manitoba Hydro with applicable legal standards and requirements. The Program shall also include management of and response to access requests for personal information in accordance with applicable legislation and regulations such as The Freedom of Information and Protection of Privacy Act (C.C.S.M. c. F175) and The Personal Health Information Act (C.C.S.M. c. P33.5). - Act as the Access and Privacy Officer for the corporation for purposes of The Freedom of Information and Protection of Privacy Act (C.C.S.M. c. F175) and The Access and Privacy Regulation 64/98. - Act as main liaison with relevant authorities having jurisdiction, such as the Manitoba Ombudsman Office and The Information and Privacy Policy Secretariat, and collaborate with authorities, peers, and experts, on matters such as best practices, legal requirements and actions, investigations and related matters. - Work with senior management to establish governance for the Program and serve in a leadership role and be accountable for Program compliance. Collaborate with the Chief Information Officer and other stakeholders to achieve and maintain compliance. policy, including development, implementation, and maintenance of associated documentation (such as consents, authorizations, records of events), processes, safeguards, and controls, monitor compliance and provide input into related corporate policies, documentation, processes, safeguards, and controls. - Establish a process to track, investigate and respond to allegations of incidents and breaches. Investigate and track incidents and breaches and advise on appropriate notification of stakeholders, authorities, and impacted or harmed individuals, in line areas, remedial measures to minimize harm to Manitoba Hydro, remedy gaps and identify areas of high risk, and preventive measures to minimize risk of recurrence. Maintain, track, and share records of violation and actions in compliance with legal requirements. - Utilize risk management to identify and manage related risks and oversee risk assessments, analysis, and management. - Provide regular reporting on the Program to the General Counsel & Corporate Secretary, senior management, and other - stakeholders. - Develop systematic approaches to address, manage, and mitigate third party compliance vulnerabilities and risks respecting privacy-related matters. MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY Reference Code: CO56928480-02 - Possess, maintain, and regularly interact in-person and on-site with, an enterprise-wide network of internal and external requirements of the Program. **_ Qualifications:_** - Completion of a four-year degree in a related discipline (such as Law, Business, etc.) with at least eight years of experience, of which two years includes privacy related experience. OR - Completion of a two-year diploma in a related discipline (such as Law, Business, etc.) with at least ten years of experience, of which two years includes privacy related experience. - Experience in overseeing, designing, creating, implementing, and/or operating an enterprise-wide program. - In-depth knowledge and experience with relevant legislation and regulations. - Experience in incident handling, conducting administrative investigations, deve