Lead Advisor, Privacy

uottawa; Ottawa; On-site; CAD 108,000 - 134,000; Full time

Job summary

The University of Ottawa is seeking a Lead Advisor, Privacy to develop and enhance the privacy management program across the institution. You will lead Privacy Impact Assessments (PIAs), advise on legislative requirements (FIPPA, PIPEDA, PHIPA, GDPR), and guide units on privacy by design in initiatives, systems, and data sharing.

You will supervise the Privacy Specialist, coordinate risk assessments, and support the Chief Privacy Officer with policy development and incident response to minimize

Responsibilities

• Provides expert advice to university leadership, faculties, and administrative units on privacy legislation, policies, and best practices for collection, use, disclosure, retention, and safeguarding of personal information.
• Supervises the work of the Privacy Specialist, including assigning and reviewing files and coaching on privacy matters.
• Supports University units that act as Health Information Custodians (HICs) by providing PHIPA-compliance guidance.
• Leads and conducts Privacy Impact Assessments (PIAs) and other privacy risk assessments for new initiatives and data-sharing arrangements.
• Tracks, monitors, and reports on privacy risks and mitigation measures across the Office's PIA portfolio.
• Leads the development and maintenance of university privacy policies, standards, and guidance materials.
• Reviews and provides final privacy advice on complex contracts and data-sharing arrangements to address privacy risks.
• Leads management of high-risk privacy incidents, complaints, and internal investigations.

Job description

Job Type: Employee

Anticipated Duration in Months (for contracts and temporary assignments): N/A

Job Family: Governance and Risk

# of Open Positions: 1

Faculty/Service - Department: Access to Information and Privacy Office

Campus: Main Campus

Union Affiliation: N/A

Date Posted (YYYY/MM/DD): 2026/08/17

Applications must be received BEFORE (YYYY/MM/DD): 2026/08/31

Hours per week: 35

Salary Grade: Non-Union Grade NM1

Salary Range: $107 503,00 - $134 379,00

Position Purpose

The Lead Advisor, Privacy supports the development, implementation, and ongoing enhancement of the University's privacy management program, and leads the Privacy Impact Assessment (PIA) process to identify and manage privacy considerations related to the collection, use, disclosure, retention, and protection of personal information across the University. This role works with a broad range of stakeholders to advance a consistent, coordinated approach to privacy compliance, embedding privacy requirements into university initiatives, systems, research activities and third-party relationships.Acting as a subject matter expert in applicable privacy legislation and best practices, including Freedom of Information and Protection of Privacy Act (FIPPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Health Information Protection Act (PHIPA), and the General Data Protection Regulation (GDPR), the Lead Advisor ensures privacy assessments, controls, and guidance are incorporated into University programs, projects, and decision‑making. The role also supports the administration and continuous improvement of privacy breach and complaint management processes, assisting in the response to incidents and complaints as needed, and provides expert advice and support to the Chief Privacy Officer and Legal Counsel in sustaining an effective and sustainable privacy program.

In this role, your responsibilities will include:

• Provides expert advice to university leadership, faculties, and administrative units on the interpretation and application of privacy legislation, institutional policies, and best practices related to compliant collection, use, disclosure, retention, and safeguarding of personal information, including complex or precedent-setting matters escalated from within the Access to information and Privacy Office, to support informed, legally sound decision‑making and reduce institutional privacy risk.
• Supervises the work of the Privacy Specialist, including assigning and reviewing files, providing day‑to‑day guidance and coaching on privacy matters, and ensuring escalation of complex or high‑risk files, to support the Specialist's development and maintain consistent quality and compliance across the Office's privacy work.
• Supports University units that act as Health Information Custodians (HICs) and their agents by providing PHIPA‑compliance guidance, reviewing initiatives involving personal health information, to ensure the University's handling of personal health information meets statutory obligations under PHIPA.
• Leads and conducts complex Privacy Impact Assessments (PIAs) and other privacy risk assessments for new or significantly modified initiatives, systems, services, or data‑sharing arrangements, including higher‑risk projects and those escalated from within the Office, such as initiatives involving AI tools and other emerging technologies. Identifies privacy risks, determining and recommending mitigation strategies aligned with risk‑based compliance approach, and providing final recommendations to support informed decision‑making.
• Tracks, monitors, and reports on privacy risks and mitigation measures across the Office's PIA and risk assessment portfolio, identifying trends and systemic issues requiring escalation to the Chief Privacy Officer.
• Leads the development, review, and maintenance of university privacy policies, standards, procedures, and guidance materials setting the framework within which other privacy team members contribute, to ensure the University's privacy framework remains current and aligned with legislative requirements and evolving best practices.
• Reviews and provides final privacy advice on higher‑risk or complex contracts, agreements, and data‑sharing arrangements involving personal information, working collaboratively with IT, procurement, legal, members of the research community, and administrative stakeholders to ensure privacy risks are addressed before agreements are finalized and third‑party relationships are established.
• Leads the management of complex high‑risk privacy incidents, complaints, and internal investigations, including those escalated from other members of the privacy team. Overseeing assessment, documentation, mitigation and response, to ensure incidents are resolved effectively, limiting harm to affected individuals and the University's liability.
• Prepares correspondence, briefing materia