Senior Privacy and Compliance Counsel

Toronto Hydro•Toronto, ON

1d•CA$109,832 - CA$137,290•Hybrid

About The Position

The Senior Privacy and Compliance Counsel facilitates and supports the organization’s privacy and compliance programs, providing strategic legal advice and maintaining alignment with applicable legislative and regulatory requirements. They partner with business units to identify, assess, and mitigate legal, privacy, and compliance risks, while promoting a culture of accountability and continuous improvement across the organization. This posting is for an existing vacancy.

Requirements

Bachelor of Laws (LL.B) or Juris Doctor (JD)
A member in good standing with the Law Society of Ontario
Three (3) or more years of professional privacy, compliance, regulatory governance or litigation experience (articling experience included) at a law firm or comparable in-house experience
Experience identifying, assessing and mitigating privacy and compliance risks
Demonstrated ability to provide practical, risk-based legal advice to leaders
Demonstrated judgment, analytical and problem-solving and decision-making skills, with the ability to distill legal information and frame for legal and business user consumption
Demonstrated negotiation and stakeholder management skills
Strong project management skills, with the ability to manage competing priorities and work in a fast-paced environment
Strong relationship management skills to build trusted relationships with leaders and stakeholders

Nice To Haves

Demonstrated Privacy Impact Assessment (PIA) experience is considered an asset
Privacy certification (CIPP/C) is considered a strong asset
Experience working in a regulated industry is an asset

Responsibilities

Leads the organization’s freedom of information (FOI) portfolio, including managing and responding to FOI requests in accordance with the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA)
Provides legal advice on privacy and data protection risks, conducts privacy impact assessments, and works with business units to ensure that systems, processes, and initiatives comply with MFIPPA and privacy best practices
Advise on cybersecurity governance, policies and risk management frameworks to strengthen the organization’s overall security posture
Reviews and interprets legislation and regulatory requirements, identifying compliance gaps and advising on appropriate controls and mitigation strategies
Conducts business unit maturity assessments, supports ongoing monitoring and testing of compliance controls and drives continuous improvement initiatives
Monitors regulatory developments and emerging risks, providing guidance on potential impacts to the organization
Supports the development and delivery of compliance-related education and outreach to ensure business units understand and manage compliance risks effectively