Privacy Counsel, Legal Affairs

PSP Investments; Ottawa; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Join a leading investment firm as Privacy Counsel in the Legal Affairs department. This role involves ensuring compliance with privacy laws, conducting assessments, and providing expert advice on data protection. The ideal candidate will have strong communication skills, a law degree, and a proactive attitude. Enjoy a hybrid work model and a comprehensive benefits package.

Benefits

Unlimited access to virtual healthcare

Gender-inclusive paid family leave

Vacation days from day one

Summer Friday afternoons off

Qualifications

• Minimum of 5 years of related experience.
• Called to the bar in at least one Canadian Province.

Responsibilities

• Perform privacy impact and vendor assessments.
• Review, draft, and negotiate data protection agreements.
• Develop and deliver in-house privacy training programs.

Skills

Interpersonal Skills

Communication

Judgment

Problem Solving

Adaptability

Education

Law Degree

IAPP Certification

Job description

At PSP, we encourage our employees to grow, forge powerful relationships, contribute, and fuel inspired investment launchpads. We are committed to a culture that fosters collaboration and allows us to think beyond, in an interconnected way. We advocate for our employees to speak up, learn, experiment, share, and be part of an environment where diversity is embraced.

ABOUT THE TEAM

As a member of PSP Investments’ Legal Affairs department and Access to Information and Privacy (“ATIP”) Office, the incumbent will, under the direction of the Senior Director, Legal Affairs, collaborate with other ATIP professionals and be responsible for activities related to PSP’s compliance with privacy laws and data protection obligations applicable in Canada, the United States, the United Kingdom, and Hong Kong. Support on access to information activities may also be required.

ABOUT YOUR ROLE

As Privacy Counsel, Legal Affairs, you’ll:

1. Perform privacy impact and vendor assessments, as required under the Privacy Act (Canada), GDPR, and other applicable privacy laws, in collaboration with internal stakeholders.
2. Process and respond to privacy requests, investigations, complaints, and consultations within legally prescribed deadlines.
3. Provide advice and recommendations on privacy requirements for projects involving personal information.
4. Review, draft, and update privacy policies, procedures, guidelines, notices, and other documentation.
5. Review, draft, and negotiate data protection addendums, data transfer agreements, and privacy and security contractual terms with suppliers.
6. Lead or support privacy and security breach investigations and report internally and externally.
7. Monitor, report on, and implement new requirements under current and emerging privacy and data protection laws, sharing relevant information with internal stakeholders.
8. Develop and deliver in-house privacy training programs tailored to different stakeholders and coordinate corporate privacy awareness activities.
9. Assist with access to information requests as needed.

WHAT YOU’LL NEED

• Called to the bar in at least one Canadian Province.
• IAPP or other privacy professional certification is an asset.
• Minimum of 5 years of related experience.
• Expertise in federal Canadian and EU/UK privacy law (knowledge of other jurisdictions is an asset).
• Interest in learning about the Access to Information Act (Canada).
• Strong interpersonal skills.
• Excellent written and verbal communication skills.
• Ability to simplify complex issues and provide practical, operational advice.
• Ability to independently prioritize and follow up to meet deadlines while managing a large workload.
• Sound judgment, adaptability, and the ability to resolve issues efficiently.
• Proactive, solution-oriented attitude.
• Strong professionalism and ethical standards.
• Respectful of diversity.

Bilingualism in English and French

We offer a tailored employee experience with a competitive total rewards and benefits package, including:

• Unlimited access to virtual healthcare and wellness programs.
• Gender-inclusive paid family leave: up to 26 weeks for primary caregivers, 5 weeks for secondary caregivers.
• Vacation days from day one, with additional days on milestone anniversaries, plus summer Friday afternoons off.
• A hybrid work model combining in-office and remote work.