Senior Compliance Analyst - Access & Privacy

NorQuest College • Edmonton, AB

4d • CA$81,492 - CA$105,819 • Hybrid

About The Position

The Senior Compliance Analyst – Access & Privacy provides advanced analytical, advisory, investigative, research, reporting, legislative interpretation, and operational support for the College's access to information, privacy, and legislative compliance programs. Reporting to the Compliance Consultant and POPA & ATIA Coordinator, this role supports the College's legislative, regulatory, and policy obligations through a practical, solution-focused, and customer-focused approach. As a member of the Information, Risk & Compliance team, the Senior Compliance Analyst works closely with internal and external stakeholders to ensure privacy de-risking is built into initiatives, projects, programs, products, and operations by design. This role conducts privacy and legislative compliance investigations, processes access to information requests, provides access and privacy advisory services, and supports the College's overall compliance framework through research, analysis, monitoring, training, and continuous improvement.

Requirements

• Bachelor’s degree in information studies, Public Policy, Archives Studies, Library Studies, Political Studies, Political Science, or a related discipline.
• Minimum four years of progressively responsible professional experience in the research, analysis, interpretation, and application of access and privacy legislation and municipal, provincial, and federal legislation.
• Knowledge of the Protection of Privacy Act (POPA), Access to Information Act (ATIA), Freedom of Information and Protection of Privacy Act (FOIP), or similar access and privacy legislation.
• Experience with technical privacy concepts and demonstrated ability to apply privacy principles and risk management practices in operational environments.
• Strong investigative, research, analytical, and problem-solving skills, with the ability to interpret complex legislative and regulatory requirements.
• Exceptional organizational, communication, and stakeholder relationship management skills, with the ability to manage multiple priorities and work independently.

Nice To Haves

• A Master’s degree in any of the following would be an asset.
• Privacy certification/designation (e.g. CIPP, CIPT); security certification/designation (e.g. CISSP, CompTIA Security+); records and information management certification/designation (e.g. CIP, CRM, IGP).
• Information Access and Protection of Privacy (IAPP) certificate from the University of Alberta, or an equivalent from a recognized post-secondary institution or a recognized professional association.
• Privacy, security, records and information management certifications, Information Access and Protection of Privacy training, knowledge of PIPA, privacy regulations, AI governance, or legislative and parliamentary procedure are considered assets.

Responsibilities

• Complete simple to complex Privacy Impact Assessments (PIAs), identify privacy risks, threat mitigations, and emerging areas of intersection between Artificial Intelligence (AI) and privacy protection.
• Conduct privacy incident assessments and investigations, analyze root causes and contributing factors, and provide recommendations to resolve incidents and complaints.
• Assess, track, and report on Data Loss Prevention (DLP) events, data security classifications, Personal Information Banks (PIBs), and privacy-related processes.
• Process privacy consent reviews, information sharing agreements, personal information corrections, and submissions to the Office of the Information and Privacy Commissioner (OIPC).
• Support activities related to simple to complex Access to Information Act (ATIA) requests, including records collection, assessment, redaction, correspondence, fee estimates, and complaint investigations.
• Provide technical and non-technical advice on access to information and privacy legislative requirements, processes, and controls to support consistent application across the College.
• Lead and support legislative compliance investigations, monitor activities, and analysis of legislative changes that may impact the institution.
• Conduct legislative research, prepare impact analyses and summary updates, and support the College's overall legislative compliance program.
• Identify process gaps and workflow improvements to strengthen access, privacy, and legislative compliance programs and align with legislative requirements and best practices.
• Support the development of training, reports, governance instruments, tools, and resources while mentoring and coaching junior analysts.

Benefits

• flexible work options
• We strive for balance between a flexible work environment, connectedness to the campus community, and ensuring NorQuesters are set up to succeed in their roles and responsibilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior