Director, Privacy and Legal Office

**_Data. Discovery. Better Health._**
**_ICES is a world-leading health research and analytics institute. With a wealth of data and analytic expertise, we create trusted evidence that has changed health policy and practice and helps ensure better health for all._**
**_Ready to discover more with us? Join our outstanding, collaborative team where your skills, knowledge and curiosity are valued and can change the future of health care._**

**At ICES, we recognize what matters most to our employees. Some of the great benefits of working at ICES include**:

- Flexible remote work arrangements anywhere in Ontario
- Competitive Compensation
- Comprehensive Benefits Program
- HOOPP Pension Plan (Defined Pension)
- Employee Assistance Program and Dialogue Well Being Program
- Generous vacation, float and caregiver days for all employees
- Education Fund and Dedicated Education Days
- Holiday Closure
- Perkopolis Employee Discount Program

**Introduction**:
ICES is seeking a Director in its Privacy and Legal office (PLO). The ICES PLO is an inter-disciplinary team of professionals that provide a full complement of privacy, legal, compliance, and risk services across the ICES Network, primarily in relation to research, analytics, data partnerships, data quality information management, and information technology.

**Responsibilities of the position include, but may not be limited to**:
**Privacy/Legal**
- Ensuring diligence in respect of the Privacy Services portfolio, whilst striving for organizational level expectations regarding service delivery;
- Keeping current on privacy/legal and risk trends and practices;
- Keeping current on case law and IPC related decisions and guidance;
- Drafting ICES-wide privacy/legal resources and information, including policies, procedures and other related documentation;
- Advising on regulatory issues to ensure organizational-wide privacy/legal compliant practices;
Compliance;
- Implementing any PLO-related recommendations and/or requirements issued to ICES by Ontario’s Information & Privacy Commissioner (IPC);
- Ensuring mechanisms are in place to demonstrably measure ICES’ compliance with all required IPC policies, procedures and practices to foster accountability;
- Ensuring ICES is in compliance with contractual obligations related to ICES’ Data Holdings Obligations;
**Risk**
- Leading and incorporating a risk-based approach on key ICES strategic priorities impacting data and new technologies;
- Responsible for implementing the enterprise-risk management program across the ICES Network;
**Audit**
- Overseeing the operationalization of ICES’ Privacy and Security Audit Program;
**Management**
- Managing the PLO, including staff reporting to the role, relevant deliverables and all related processes according to agreed-upon timelines;
- Managing PLO staff reporting to the role, including oversight of their work, providing performance feedback, mentoring and coaching;
- Managing workload, priorities and deliverables of PLO staff;
- Directing work and initiating reporting processes with members of the PLO;
**Operations**
- Preparing, implementing and overseeing the operational plan for the PLO;
- Leading the development, measuring and reporting of Key Performance Indicators (KPIs) for PLO staff in support of ICES’ strategic priorities;
- Leading the development, measuring and reporting of service level agreement (SLAs) targets to improve client satisfaction;
- Leading the development, measuring and reporting of departmental-level balanced scorecards, where applicable;
- Successful achievement of KPIs and SLAs, and/or demonstrating continuous improvement.

**Strategy**
- Directly supporting and championing initiatives in furtherance of ICES’ strategic objectives and providing guidance to team;
- Consulting and liaising with internal and external parties to accomplish any of the above, including, ICES Employees and ICES Scientists; data partners; privacy and security advisors; external legal counsel; ICES service providers, auditors and consultants; and research ethics boards;
- Other duties as may be assigned within the scope of this position.

**Knowledge, skills and abilities required**:

- Master’s and/or law degree (lawyer licensee in good standing with the Law Society), an asset;
- recognized privacy accreditation completed and/or several years of advising on privacy matters required, ;
- Minimum 8 years of relevant privacy, legal, and/or compliance work experience;
- Minimum 3-5 years of experience managing employees;
- Demonstrated experience designing and implementing processes, tools, forms, logs, and other mechanisms to support operations, including the development of metrics, dashboards, and methods to track and evaluate progress;
- Demonstrated experience leading successful development and rollout of policies, procedures and practices;
- Demonstrated experience leading largescale initiatives and projects, from conception to design to implementation;
- Demonstrated experien