Privacy & Risk Analyst

The Skyline Group of Companies•Guelph, ON

56d•$65,000•Onsite

About The Position

The Privacy & Risk Analyst is responsible for providing operational, analytical, and research support within the Legal team. This role assists with privacy assessments, CASL compliance assessment, legal compliance activities, incident response, vendor risk reviews, and the implementation of governance processes that ensure Skyline manages personal information in alignment with Canadian privacy legislation and internal policies.

Requirements

Strong oral and written communication skills in English; French is an asset
Problem solving skills necessary to resolve routine and non-routine privacy issues.
A positive attitude! You can handle any problem with optimism.
Post-secondary education in related field (e.g., Law, Computer Science, Cybersecurity or Information Technology)
Knowledge of privacy, data governance and security and AI legislation, regulations and guidelines published in Europe and the United States of America.
3-5 years relevant work experience.

Nice To Haves

IAPP privacy certifications (CIPP/C, CIPM) preferred.

Responsibilities

Providing day‑to‑day operational and analytical support to Counsel, Privacy and Risk across privacy, data management, Artificial Intelligence (“AI”) governance, and third‑party risk functions.
Conducting privacy impact assessments, maintaining records of processing activities (ROPAs) and supporting CASL compliance activities, while ensuring appropriate controls and mitigation measures are in place.
Maintaining, reviewing and updating the vendor management program, including monitoring and reporting on vendor performance and contractual obligations to internal stakeholders.
Supporting the management and investigation of privacy and security incidents and breaches.
Monitoring relevant regulatory and policy developments at the federal, provincial and international levels.