Privacy & Information Management Specialist

SGI•Regina, SK

1d•CA$90,116 - CA$120,147•Hybrid

About The Position

The successful candidate will be responsible for leading the delivery of the privacy and information management programs, policies and procedures for the Corporation. This includes understanding and providing recommendations to initiatives across the corporation. This role works collaboratively with multiple levels of management to evaluate privacy and information management risks, in accordance with internal policies, applicable legislation and industry best practices, and aims to provide actionable recommendations to mitigate the risk. Collaborates with business areas to provide innovative solutions and direction on solving problems, incorporating privacy, access, ethics, and information management best practices and aligning with corporate strategy. Provides advice and guidance to business areas, and the privacy, access, ethics, and information team for matters that require interpretation and understanding of the legislation and how it is applied. Responsible for researching and analyzing legislative changes and industry best practices to offer strategic guidance on privacy and information management policies, standards and program objectives. Conducts privacy and information management audits and performs risk analysis.

Requirements

A four-year degree from an accredited post-secondary education institution in a relevant field of study such as business or information technology.
Recognized certification in privacy and/or information management or other industry recognized areas (e.g. International Association of Privacy Professionals (IAPP) designation).
Six years’ experience administering a privacy and/or information management program.
Knowledge of privacy and information management provincial and federal policies and legislation, including Saskatchewan’s The Freedom of Information and Protection of Privacy Act, The Health Information Protection Act, and The Archives and Public Records Management Act, British Columbia’s Personal Information Protection Act, Alberta’s Personal Information Protection Act, and Canada’s Personal Information Protection and Electronic Documents Act.
Knowledge of privacy, information management, risk management, and compliance methodologies.
Knowledge of privacy and information management best practices, concepts, lifecycles, tools, procedures and practices.
Knowledge of electronic records management technology solutions and trends.
Knowledge of privacy and information governance trends.
Knowledge of investigative techniques.
Knowledge of organizational structure, business processes, and how they interact to support insurance operations.
Knowledge of SGI corporate policies, standards, and procedures and how they impact initiatives.
Skills to consult and communicate with individuals at all levels of the organization.
Skill in coordinating multiple timelines to ensure critical deadlines are met.
Skill in analytical and critical thinking to determine business needs and provide recommendations and innovative solutions.
Ability to understand how privacy, access, ethics and information management principles and trends impact SGI’s business and corporate strategy to drive value.
Ability to write and communicate clearly, and concisely to targeted audiences.
Ability to visually present and communicate risk analysis and mitigations strategies.
Ability to use critical thinking and problem-solving skills to identify risks and propose new approaches to business areas to mitigate risks.
Ability to connect and build business relationships.

Responsibilities

Assesses all privacy impact assessments (PIA) for the purpose of evaluating and recommending changes to business practices, policies, operating procedures and controls used to protect the corporation’s information holdings and ensuring compliance with privacy and information management policies, standards, and legislative requirements.
Assesses and evaluates privacy and information management requirements for procurement documents (e.g. request for proposals), providing opinions and advice on requirements and legislation, evaluating vendors and communicates risks and evaluations with purchasing, vendors and the businesses areas.
Reviews, problem solves, and provides advice and direction to business areas, through consultative support, related to privacy, access, ethics, and information management, reviewing documents and ensuring the applicable governance and legislative requirements are incorporated into daily operations in alignment with the corporate strategy.
Collaborates with all business partners to understand and assist in solving problems, providing innovative solutions that consider corporate risks and align with the corporate strategy.
Collaborates with internal legal counsel and security team to ensure privacy, information management, and security requirements are met by reviewing contracts, identifying gaps, assisting in drafting contract language, providing expertise during contract negotiations with third parties and ensuring compliance throughout the contracted relationship.
Provides advice and direction through the governance processes for M365, by reviewing business area requests for products and offerings and identifying risks or gaps with current practices.
Provides consultation services to business areas throughout project stages, including developing privacy and information management requirements, and consulting throughout the project ensuring privacy and information management are embedded by design.
Executes privacy and information management audits, conducts analysis of audit results for the purpose of evaluating and recommending changes to business practices, policies, operating procedures, and controls used to protect the corporation’s information holdings and ensuring compliance with privacy policies and legislative requirements.
Produces comprehensive audit reports and risk analyses, articulated in a manner that is consumable to business areas.
Researches and obtains knowledge of emerging technologies to identify opportunities and evaluate privacy and information management risks.
Implements strategies for the long-term delivery of privacy, access, ethics, and information management services to the business, this includes researching emerging technologies and legal/regulatory requirements and developing analytics for the ongoing monitoring of the program effectiveness.
Drives continuous improvement by regularly updating internal and corporate-wide procedures, including enhancing our privacy, access, ethics, and information management programs (e.g. PIA’s) to maintain compliance and optimize operational efficiency, while ensuring departmental operations are economic and effective.
Oversees projects related to privacy and information management, including managing the scope of work, timelines, status, budget, reporting, and communication with vendors or business areas as required.
Maintains enterprise-wide records classification and retention schedule that meet legislative, regulatory and business requirements and makes recommendations for improving and implementing the schedule based on consultation with the business areas.
Responsible for managing the implementation of vendor contracts and overseeing daily operations including communication with the vendors and business areas.
Provides advice and guidance to other privacy and information management employees.
Oversees the corporate wide inventories and disposition process, working with the Information Management Coordinators and business areas to ensure appropriate application of legislation, prior to approval by the Designated Records Officer.
Develops and delivers privacy, access, ethics, and information management training to employees.
Develops content (e.g. employee intranet) and promotes activities to foster privacy, access, ethics, and information management awareness within the organization (e.g. privacy awareness day).
Communicates organizational policies, standards, and procedures promoting the value of privacy, access, ethics, and information management principles and best practices.
Researches legal and regulatory requirements and changes for privacy and information management.
Ensures that all privacy, access, ethics, and information management policies, standards, and procedures adhere to applicable laws.
Builds and maintains relationships and collaborates with management throughout the entire corporation.
Builds and maintains relationships with vendors.
Consults with external agencies, other government agencies, and other stakeholders on industry best practices.
Maintains relationships with regulators responsible for privacy and information management.
Actively contributes to and supports a culture of a high performing workforce.
Participates in divisional succession plans, ensuring ongoing professional and career development and supports development in others.
Supports a culture of leadership and accountability to effectively deliver on strategic and corporate strategies.
Is actively committed to leadership development across the company, supporting team and workforce readiness through mentoring, training and developmental opportunities.
Enables the success of programs and policies that are in alignment with corporate, strategic and divisional strategies.
Manages risk in area of authority.
Ensures that the Health, Safety and Emergency Management Policy is applied in area of responsibility.