Risk & Privacy Specialist

Position Summary

Administrative Full-Time Replacement Position

The Risk & Privacy Specialist will primarily focus on privacy-related matters, acting as the subject matter expert regarding issues with privacy risk exposure. This role is responsible for ensuring compliance with all privacy regulations, managing privacy projects, and fostering a culture of privacy within the college. Additionally, the Specialist will support broader risk management responsibilities as required by the Executive Director of Risk, Campus Safety & Security.

Successful candidates will be required to conduct work within Ontario and must be available to work on-site five days per week at the Doon campus, located at 299 Doon Valley Dr., Kitchener, Ontario, N2G 4M4. The hours of work for this position are Monday to Friday, 8:00 a.m. to 4:00 p.m.

Responsibilities

Privacy

• Serves as the primary point of contact and subject matter expert for all privacy risk-related matters across the institution
• Stays current with evolving privacy legislation and regulatory requirements, applying this knowledge to Conestoga’s operations
• Oversees and manages privacy-related requests, including Freedom of Information (FOI) requests, access to information, contract reviews and procurement assessments
• Coordinates and conducts investigations into privacy breaches, identifies mitigating strategies, and makes enterprise-level recommendations to prevent recurrence
• Prepares and submits annual privacy-related statistical reports to the Information & Privacy Commissioner of Ontario
• Conducts Privacy Impact Assessments (PIA) for new IT systems, programs, and initiatives to ensure compliance with privacy standards
• Builds and maintains relationships with internal and external stakeholders to promote and reinforce privacy best practices
• Reviews and updates privacy-related policies, procedures, and guidelines to ensure alignment with current regulations and best practices
• Identifies and implements improvements to enhance the efficiency of the Privacy Office and its impact on Conestoga’s operations
• Conducts in-depth research and provides analysis on complex privacy issues to guide decision-making
• Develops and delivers role-specific and general privacy training for employees and external partners
  
  

Risk management

• Provides backup for other risk-related functions as needed, ensuring seamless coverage of all risk management responsibilities
• Engages in continuous professional development to stay updated on emerging risk and privacy practices
• Assists in conducting risk assessments and reviews across various college departments, programs, and processes, identifying potential vulnerabilities, and recommending corrective measures
• Supports with risk-related projects and initiatives assigned by the Executive Director of Risk, Campus Safety & Security, contributing to the overall safety and risk reduction strategies for the college
  
  

Qualifications

• Three-year diploma or degree in Business Administration, Social Sciences, or related field
• Five years of work-related experience in risk management and privacy is required; experience in post-secondary education or the public work sector is preferred
• Canadian Risk Management (CRM), Certified Risk Management Professional (CRMP) and/or privacy-related designations (e.g., Certified Information Privacy Professional/Canada (CIPP/C)) are considered assets
• In-depth knowledge of privacy legislation, including the Freedom of Information and Protection of Privacy Act (FIPPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the Personal Health Information Protection Act (PHIPA)
• Expertise in risk assessment methodologies and incident management
• Proven ability to meticulously manage privacy requests, conduct thorough investigations, and prepare accurate reports with strong attention to detail
• Excellent communication skills to clearly convey information and policies to stakeholders
• Strong interpersonal skills to build and maintain relationships with internal and external stakeholders
• Proven problem-solving abilities to develop solutions for privacy and risk-related issues
• Ability to demonstrate initiative by proactively identifying and addressing privacy and risk issues, managing projects to completion, and seeking continuous improvements
  
  

Apply Now

Apply to this requisition Print this requisition