Senior Privacy Specialist

CAAT Pension Plan•Toronto, ON

8d•CA$96,800 - CA$113,800

About The Position

We are seeking a Senior Privacy Specialist to maintain and continuously enhance CAAT’s privacy management and records management programs. Working closely with stakeholders across the organization, the successful candidate will act as a trusted advisor and subject matter expert on privacy compliance and records retention. As CAAT continues to expand across multiple jurisdictions and product offerings, this role will play a key part in building and operationalizing a mature privacy program while supporting a culture of privacy organization wide.

Requirements

Post secondary education with a focus in law, information studies or a similar area of study.
A minimum of five (5) years of experience in privacy program management, compliance, pension administration, or a related legal/compliance environment.
Experience designing, implementing, operating, and enhancing privacy programs and privacy compliance activities.
Experience conducting privacy impact assessments, responding to privacy incidents, and advising business stakeholders of privacy related matters.
Excellent prioritization skills with the ability to management competing priorities and navigate ambiguity.
Strong written and verbal communication skills, with the ability to simplify complex information.
A self-starter mindset with the ability to work independently while collaborating effectively with partners across the business.

Nice To Haves

Professional privacy or compliance certification such as CIPP/C, CIPM, or similar is considered an asset.

Responsibilities

Contribute to the ongoing development, implementation, and continuous improvement of CAAT’s privacy and records management programs.
Conduct privacy impact assessments and provide privacy analysis, guidance, and recommendations to business stakeholders.
Provides guidance and advice to departments and internal business partners on requirements for privacy compliance; integrating privacy protective practices into business operations.
Lead and coordinate investigations related to privacy incidents, including privacy assessments, root cause analysis, mitigation planning, and associated reporting requirements.
Develop and deliver privacy training, education, and awareness initiatives to strengthen privacy knowledge and practices across the organization.
Review contracts, participation agreements, data processing addendums, AI-related agreements, and other third-party arrangements to identify and mitigate privacy risks.
Monitor changes to privacy legislation and emerging regulatory requirements, assessing impacts and helping update internal policies, procedures, and controls accordingly.
Create and maintain an enterprise personal information inventory and log of associated data flows.
Maintain and advise on records retention requirements, policies, procedures, and standards.
Contribute to broadening regulatory compliance initiatives and issues as assigned.

Benefits

Competitive compensation
Exceptional benefits
An environment where people can grow and thrive
Opportunities to Build a Better You
Comprehensive & Holistic Care
Total Rewards program that feeds and prioritizes your physical, mental, and financial wellness
Flexible work arrangements
Comprehensive benefits
Wellness incentives
A defined benefit pension plan
A lively environment where creativity and open communication thrive