Privacy Analyst

**Privacy Analyst - Job Description**:
Reporting to the Data Privacy & Security Manager, or the Chief Privacy Officer, the Privacy Analyst is responsible to provide operational support and assistance with all aspects of Data Privacy and related documentation. This role is responsible for supporting privacy practices in accordance with organizational requirements, best practices, legislative and regulatory requirements for promoting data quality.

The Privacy Analyst must be able to identify privacy gaps and risks as new information is presented and effectively communicate privacy requirements and associated risks to senior management.

Responsibilities include promoting a culture of compliance and privacy, advising on and resolving privacy issues, conducting privacy risk assessments, and managing privacy-related inquiries, investigations and incident response. Support current processes and frameworks for compliance with privacy and data security laws in existing and emerging markets. Manage and complete DPIAs, working with system owners and IT as necessary for new systems /tools and processes. Participate in audits where knowledge of our data and privacy security practices is required.

**Knowledge, skills and abilities required**:

- Knowledge of privacy principles, best practices and keeping with various legislative acts e.g. GDPR, PIPEDA
- Knowledge of all applicable Legislative Acts, Standards and Ministry requirements
- Knowledge of privacy/security requirements, standards and best practice.
- Ability to interpret laws, regulations, and policies.
- Ability to prioritize while working with multiple tasks and projects. Demonstrated flexibility in working with changing demands.
- Strong critical/analytical thinking, problem-solving, balancing the need to resolve issues quickly with an effective and thorough analysis.
- Maintain and create new documentation for Privacy-related updates, regulatory changes, and technical advancements.
- Support process improvement initiatives across the Privacy Program.
- Collaborating on the privacy audit program; performing regular privacy audits and recommending corrective action.
- Investigating privacy inquiries, requests and incidents, coordinating the incident response plan, and recommending corrective action to avoid repeated incidents.
- Strong ability to maintain confidentiality; possesses diplomacy and tact
- Support staff members across business lines and project teams, as needed, by addressing privacy-related queries in their areas.
- Stay up to date in current developments and trends in privacy laws, regulations and industry standards.
- Planning, developing, implementing, updating, communicating and enforcing all data privacy and security related policy and procedure documents, including but limited to privacy notice, information security policy, incident response policy and disaster recovery policy.
- Promote a privacy culture amongst all staff.
- Other activities, as assigned by the Data Privacy & Security Manager.

**Nice to Have**:

- IT knowledge and understanding as it relates to privacy.
- Ability to analyze facts and legal documents.
- Conducting privacy research.
- A minimum of three to four (3-4) years’ experience in a privacy related role.
- Certification as a Certified Information Privacy Professional (CIPP) or in progress of obtaining certification.

**Job Types**: Full-time, Permanent

**Benefits**:

- Company events
- Dental care
- Extended health care
- On-site gym
- On-site parking
- Paid time off

Schedule:

- 8 hour shift
- Monday to Friday
- No weekends

Ability to commute/relocate:

- North York, ON: reliably commute or plan to relocate before starting work (required)

Work Location: In person