Data Protection Specialist (IT)

The Globe and Mail; Toronto; Hybrid; CAD 108,000 - 124,000; Full time

Job summary

The Globe and Mail in Toronto is seeking a Privacy & Data Governance Specialist to support privacy laws, data protection, and consent management initiatives. The hybrid role works with IT, Legal, Security, and Compliance to implement controls and maintain data inventories.

You will assist with data protection tasks, run privacy impact assessments, and help train teams on new privacy and security processes. A strong background in governance and risk is essential.

Qualifications

• At least 5 years of relevant privacy and data governance experience.
• A post-secondary degree in related field or combination of education and experience with continuing professional development in privacy and information security risk.
• Knowledge of Canadian data privacy laws and best practices.
• Experience with data protection activities such as data mapping, privacy impact assessments and vendor risk assessments.
• Project and/or program management experience.
• Familiar with risk management and compliance and able to provide guidance on related matters, including application of policies and procedures.
• Familiar with technology systems and architecture as it applies to data, e.g. databases, cloud systems, technical integrations, data flows, privacy enhancing technologies and techniques and security controls.

Responsibilities

• Assist with data protection activities including, the administration of a consent management system, maintenance of a data map, conducting privacy impact and vendor risk assessments, overseeing individual rights requests, and operationalizing privacy and security requirements as necessary.
• Support the continuous improvement of, and maintenance of, data protection tools, policies, standards, templates, and procedures.
• Work collaboratively with cross functional partners (Cybersecurity/Technology/Legal/Operations) to initiate privacy and security processes and ensure data protection requirements are met.
• Integrate data protection into other governance processes and assist in the development of intake channels that alert privacy and security when appropriate (vendor governance, technical project delivery process, data governance processes).
• Develop and deliver team specific training and guidance to internal audiences for new controls and processes.

Skills

Privacy governance

Data mapping

Vendor risk assessments

Project management

Policy development

Stakeholder communication

Leadership

Education

Post-secondary degree in related field

Tools

Consent management system

Data inventory tools

Data governance platforms

Job description

POSITION OVERVIEW

Reporting to IT, this role will support legal and compliance requirements related to privacy laws and overall data protection best practices. To this end, the role will assist with the ongoing administration and use of a consent management system, maintenance of a data inventory as well as operationalizing data protection requirements as necessary. The role will also support data protection tasks within security operations as required. This is an existing vacancy, and this position is a hybrid role based in Toronto.

RESPONSIBILITIES

• Assist with data protection activities including, the administration of a consent management system, maintenance of a data map, conducting privacy impact and vendor risk assessments, overseeing individual rights requests, and operationalizing privacy and security requirements as necessary.


• Support the continuous improvement of, and maintenance of, data protection tools, policies, standards, templates, and procedures.


• Work collaboratively with cross functional partners (Cybersecurity/Technology/Legal/Operations) to initiate privacy and security processes and ensure data protection requirements are met.


• Integrate data protection into other governance processes and assist in the development of intake channels that alert privacy and security when appropriate (vendor governance, technical project delivery process, data governance processes).


• Develop and deliver team specific training and guidance to internal audiences for new controls and processes.

QUALIFICATIONS

• At least 5 years of relevant privacy and data governance experience.


• A post-secondary degree in related field or combination of education and experience with continuing professional development in privacy and information security risk.


• Knowledge of Canadian data privacy laws and best practices.


• Experience with data protection activities such as data mapping, privacy impact assessments and vendor risk assessments.


• Project and/or program management experience.


• Familiar with risk management and compliance and able to provide guidance on related matters, including application of policies and procedures.


• Familiar with technology systems and architecture as it applies to data, e.g. databases, cloud systems, technical integrations, data flows, privacy enhancing technologies and techniques and security controls.


• Strong leadership skills and ability to communicate clearly and concisely at all levels within an organization.

HELPFUL TO HAVE BUT NOT REQUIRED

• Experience with privacy, data and security investigations.


• Experience with consent management systems, vendor risk assessments, PCI compliance, or GRC (Governance, Risk, Compliance).


• Knowledge of international privacy laws and emerging data and AI governance expectations.


• Privacy/data protection or security risk management certifications such as CIPP, CIPM, CDPSE, or CRISC.

SALARY

The base salary for this role ranges from $107,600 to $123,800 per year. Placement within this range depends on a candidate's level of experience, technical skills, and alignment with the role's requirements. Candidates who have been identified as meeting the role's requirements can expect to be near the midpoint of this range, while the upper end is reserved for those with specialized expertise or a strong track record of success in comparable roles. This role may be eligible for The Globe's Annual Incentive Plan, which is based on a combination of corporate and revenue objectives and rewards individual performance.