Privacy Analyst-1

Build a meaningful career

At LifeWorks, we offer more than career opportunities, we provide career opportunities to make meaningful contributions to people’s lives. The extraordinary expertise of a more than 7,000-strong workforce is harnessed to support the employees and families of the organizations we serve. Our innovative programs have a lasting impact on the health, financial security and productivity of 24,000 workplaces.

As part of the Legal, Risk and Privacy Team, reporting to and under the supervision of the corporate Privacy Officer, the Privacy Analyst will be responsible for key elements and offerings of the Company’s global privacy compliance function.
Job Description - Privacy Analyst (18 Month Contract)

As part of the Legal, Risk and Privacy Team, reporting to and under the supervision of the corporate Privacy Officer, the Privacy Analyst will be responsible for key elements and offerings of the Company’s global privacy compliance function.

The Privacy Analyst will lead with influence and a continuous improvement mindset and will provide advice to project and line of business stakeholders, including management. They will collaborate with information security, risk & compliance and legal to enhance the privacy program. The Privacy Analyst may also collaborate with the Data Governance team to ensure alignment between programs.

To be successful in this role the Privacy Analyst will need to understand data management, data analytics, global privacy trends, the impact of technology on privacy compliance, and also provide solid advice and customer support.

Duties & Responsibilities
- Work collaboratively with Legal, Risk and Privacy team to provide guidance and advice in a consulting role for privacy compliance within the organization and provide assistance to business teams and management on the interpretation of privacy laws, government and internal policies, and industry standards
- Provide advice and guidance on operational implementation and compliance with the Company’s privacy program, including responding to requests from clients and partners
- Work with various stakeholders to address privacy, data protection and compliance questions and concerns relating to the sales processes (e.g. RFP questions, audit checklists, and agreements).
- Enhance the Company privacy program that defines, develops, maintains and implements policies and processes to enable consistent, effective privacy-compliant practices that minimize risk, balance operational imperatives, and ensure the confidentiality of personal information (including health and financial information) across our global business processes
- Facilitate and promote activities to champion information privacy awareness within LifeWorks and develop and implement standard methodologies
- Maintain current knowledge of applicable Canadian, US, EU and international privacy laws
- Draft and maintain documentation (e.g. policies and procedures) in support of the corporate Privacy Program
- Coordinate and lead privacy impact assessments and related assessment exercises (e.g. data mapping) for internal products and services
- Participate in vendor risk management processes
- Participate in compliance initiatives (e.g. SOC 2) while coaching /guiding stakeholders on internal controls and governance processes
- Consult on response to RFP and client questions on privacy compliance
- Provide guidance on maintaining appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements
- Maintain and monitor the process for receiving, documenting, tracking, investigating, and acting on all privacy related complaints and breaches in coordination with other similar functions and, when necessary, external legal counsel
- Monitor advancements in information privacy technologies to ensure organizational awareness, adaptation and compliance where applicable

Basic Qualifications
- Bachelor’s degree in Business, Legal, Information Systems or related field
- Professional Privacy Certification (Certified Information Privacy Professional (CIPP) or equivalent)
- Seven (7) to ten (10) years of relevant experience
- Advanced knowledge of relevant privacy laws, regulations and standards in Canada, the US and the EU
- Experience providing advice on issues related to foreign legislation (including GDPR) and ability to interpret laws and legal advice
- Understanding of IT and data management systems to assess security systems in place to protect personal information
- Experience in executing privacy / compliance programs, risk management, analysis and operational improvement using the principals of change management and project management
- Demonstrated organization, facilitation, communication and presentation skills
- Demonstrated experience and skills in collaboration, teamwork, and problem solving

Assets
- Background / experience with privacy compliance