Privacy Advisor

Metrolinx

About The Position

Metrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express, as well as the PRESTO fare payment system. We are also building new and improved rapid transit, including GO Expansion, Light Rail Transit routes, and major expansions to Toronto’s subway system, to get people where they need to go, better, faster and easier. Metrolinx is an agency of the Government of Ontario. At Metrolinx, equity, diversity and inclusion are essential to living our values of serving with passion, thinking forward and playing as a team. Our Privacy team within the Legal Services is seeking a Privacy Advisor. This role provides day‑to-day support to Metrolinx’s privacy program by offering advice, guidance, and training to corporate programs and activities that safeguard privacy. The Privacy Advisor will also support the interpretation, development, and implementation of the privacy program, ensuring its objectives and practices align with government legislation, regulatory requirements, and industry best practices.

Requirements

Completion of a degree in Business Administration, Information Management, Information Technology or related field – or a combination of education, training and experience deemed equivalent.
Demonstrated progressive experience/training providing technical advice and guidance relating to information access and privacy, preferably public sector experience.
Knowledge of and ability to interpret and apply legislation and government regulations guiding privacy protection and access to information including Freedom of Information and Protection of Privacy Act (FIPPA).
Analytical and problem-solving skills to: assess privacy compliance for new programs or services; coordinate and conduct privacy impact assessments, support investigations, and prepare responses to privacy breach incidents.

Nice To Haves

Certified Information Privacy Professional for Canada (CIPP/C) considered an asset.

Responsibilities

Promotes consistent interpretation, application and compliance with legislative requirements of the Freedom of Information and Protection of Privacy Act (FIPPA) and guidance from Ontario’s Information and Privacy Commissioner.
Maintains current knowledge of the application/interpretation of privacy legislation and regulations and industry changes and anticipates the impact of privacy issues on organizational/corporate practices and programs.
Provides support to Metrolinx business units, project team members, and other privacy team members to ensure compliance with Metrolinx privacy policies and legislative and contractual obligations.
Privacy Policies and Practices: Assists with the implementation of strategic privacy projects, including policies, best practices and risk mitigation strategies across the organization’s business units.
Privacy & Jurisdictional Research: Monitors and conducts privacy research and analysis activities to identify and assess jurisdictional/private sector and industry best practices.
Privacy Impact Assessments: Identifies and assesses privacy risks for projects of light to medium complexity and provides advisory and consultative support to risk owners to develop appropriate mitigation plans. Conducts post-implementation analysis and reviews to ensure recommendations have been implemented.
Incident & Breach Management: Under the guidance of the Senior Privacy Advisor, supports privacy incident investigations to identify privacy breaches and supports response plans through all phases of the incident response process.
Privacy Inquiries & Complaints: Responds to privacy inquiries and logs follow-up activities and resolutions.
Privacy Audits: Supports reviews of action plans to address findings of privacy audits and monitoring, in collaboration with Senior Privacy Advisor, Internal Audit, and respective business units.
Enterprise Risks: Ensures assigned risks are added to the ERM and monitor to ensure compliance with risk mitigation plans and associated timelines.