Manager, Privacy and AI Governance

CAIS; Hamilton; On-site; CAD 76,000 - 115,000; Full time

Job summary

CAIS in Hamilton, ON is seeking a Manager of Privacy and AI Governance to lead privacy and data protection efforts within the IT team. You will implement PIAs, maintain ROPAs, and perform vendor privacy assessments while aligning with PIPEDA, PHIPA and responsible AI practices.

The role requires collaboration with teachers, parents, and students to translate privacy obligations into practical safeguards for school technologies. On-site only, with governance over AI adoption and data use.

Qualifications

• Degree or diploma in Information Technology, Information Systems, Computer Science, or a closely related field.
• Formal training or demonstrated professional experience in privacy management, including Privacy Impact Assessments (PIAs), Records of Processing Activities (ROPAs), or vendor assessments.
• Experience working within an IT or technology team, contributing to system design, access controls, and data flows.
• Strong knowledge of Canadian privacy legislation, including PIPEDA and PHIPA.
• Demonstrated understanding of AI tools and their implications for privacy, information security, and responsible use, with the ability to translate risks into practical safeguards.

Responsibilities

• Lead the College’s Privacy and Data Protection Program, embedded within IT operations.
• Maintain Records of Processing Activities (ROPAs) and conduct Privacy Impact Assessments (PIAs), with particular attention to student data and emerging technologies.
• Perform vendor privacy assessments and collaborate with IT on associated security reviews.
• Operationalize compliance with PIPEDA, PHIPA, and applicable legislation through system design, access controls, and documented processes.
• Develop, implement, and maintain privacy policies, standards, notices, and consent practices appropriate to a school community.
• Oversee privacy-related staff awareness and training; collaborate with IT on phishing simulations and security awareness initiatives.
• Contribute to the IT Risk Register and support annual cyber insurance renewal from a privacy and governance perspective.
• Collaborate with departments to standardize dashboards, analytics, and reporting practices.
• Partner with the Director of Technology Integration & Innovation to develop and implement the College’s responsible AI framework.
• Evaluate emerging tools, including AI, automation, and workflow platforms, weighing benefits against privacy risks.
• Provide guidance on responsible technology adoption and long-term digital strategy.

Skills

Privacy management

PIAs

ROPAs

PIPEDA/PHIPA

AI governance

Vendor assessments

IT collaboration

Data protection

Cybersecurity awareness

Education sector experience

Education

Information Technology/Computer Science degree

Privacy certifications (CIPP/C/CIPM)

Job description

Manager, Privacy and AI Governance

Location: Hamilton, ON

Work arrangement: On-site position; not available for remote work

Vacancy status: 1 vacancy available (full-time permanent)

Salary: $76,393 to $114,589

Position Overview

The Privacy and AI Governance Manager is an IT-embedded role focused on implementing privacy, data protection, and responsible information use in a PreK–12 school environment. Reporting to the Director of Technology Integration & Innovation, this position serves as a full member of the IT team, operationalizing privacy requirements across systems, workflows, and student-facing technologies.

The successful candidate will be a hands-on team member who enjoys collaborating with College employees, parents, and students to translate privacy obligations into workable technical and procedural solutions. This is not a legal or advisory-only role. The role partners closely with the existing IT team and cybersecurity expertise to ensure a secure, ethical, and future-ready digital environment.

As AI becomes increasingly integrated into education and College operations, this role will help ensure HSC remains forward-thinking in its adoption of emerging technologies. Working with the Director of Technology Integration & Innovation, the Manager will support purposeful innovation that strengthens teaching, learning, efficient collaboration, and operational effectiveness while protecting the privacy, safety, and wellbeing of students, faculty, staff, and families.

Work Environment

This position requires a daily on-site presence in Hamilton, ON and is not available for remote work or telecommuting.

All interviews will be conducted in person.

Qualifications

Required:

• Degree or diploma in Information Technology, Information Systems, Computer Science, or a closely related field.
• Formal training or demonstrated professional experience in privacy management, including Privacy Impact Assessments (PIAs), Records of Processing Activities (ROPAs), or vendor assessments.
• Experience working within an IT or technology team, contributing to system design, access controls, and data flows.
• Strong knowledge of Canadian privacy legislation, including PIPEDA and PHIPA.
• Demonstrated understanding of AI tools and their implications for privacy, information security, and responsible use, with the ability to translate risks into practical safeguards.

Preferred:

• Experience in an educational, healthcare, public sector, or other regulated environment.
• Privacy certifications such as CIPP/C, CIPM, or CIPT.
• Working knowledge of cybersecurity practices sufficient to collaborate effectively with security specialists.
• Experience supporting or interacting with students in a school setting.
• Experience developing AI governance practices, assessing AI vendors, or supporting responsible AI adoption in an educational or organizational setting.

Responsibilities

Privacy, Data Protection & Risk

• Lead the College’s Privacy and Data Protection Program, embedded within IT operations.
• Maintain Records of Processing Activities (ROPAs) and conduct Privacy Impact Assessments (PIAs), with particular attention to student data and emerging technologies.
• Perform vendor privacy assessments and collaborate with IT on associated security reviews.
• Operationalize compliance with PIPEDA, PHIPA, and applicable legislation through system design, access controls, and documented processes.
• Develop, implement, and maintain privacy policies, standards, notices, and consent practices appropriate to a school community.
• Oversee privacy-related staff awareness and training; collaborate with IT on phishing simulations and security awareness initiatives.
• Contribute to the IT Risk Register and support annual cyber insurance renewal from a privacy and governance perspective.

Digital & Data Governance

• Support alignment of on-premises and cloud systems within a cohesive digital ecosystem.
• Maintain IT governance standards, workflows, and approval processes.
• Contribute to advancing the College-wide data governance framework, including data quality, lifecycle management, and integrations.
• Collaborate with departments to standardize dashboards, analytics, and reporting practices.

Responsible AI, Digital Innovation & Emerging Technologies

• Partner with the Director of Technology Integration & Innovation to develop and implement the College’s responsible AI framework, supporting educational innovation, operational improvement, and safe use.
• Proactively identify, evaluate, and pilot emerging tools, including AI, automation, and workflow platforms, weighing educational and operational benefits against privacy and security risks.
• Advise on responsible technology adoption and long-term digital strategy, helping the College anticipate and respond to technological change.
• Assess how AI providers collect, retain, share, and use College information, including whether they use data to train models or pass it to third-party services.
• Establish practical safeguards for student and employee information, images, confidential materials, and College branding when using AI tools.
• Maintain clear processes for reviewing, approving, and periodically reassessing AI tools as their capabilities, terms, and data practices evolve.
• Collaborate with faculty, staff, and students to develop guidance on AI accuracy, bias, transparency, academic integrity, and appropriate human oversight.
• Monitor developments in AI and emerging technologies and translate them into timely recommendations, updated guidance, and training for the College community.
• Communicate risks, opportunities, and best practices clearly to non-technical audiences, supporting informed and confident technology use.

Student & School Community Support

• Work collaboratively with students, faculty, advisors, and school leaders to support privacy-related concerns, digital conduct, and responsible technology use.
• Contribute to student-centred responses to privacy or digital incidents, balancing compliance, education, and wellbeing.
• Provide guidance that is developmentally appropriate and aligned with the College’s educational mission and Code of Conduct.

Emergency & Risk Leadership

• Partner with the IT Manager to respond to cybersecurity incidents, privacy breaches, and disaster recovery events, emphasizing prevention and learning.
• Support investigations related to privacy, cybersecurity, and digital conduct using a proactive, educational approach.
• Maintain incident response plans and assist with tabletop exercises and business continuity planning.

Team Mentorship & Engagement

• Mentor IT staff, co-op students, and new team members on matters related to privacy and information security.
• Deliver practical workshops for parents, faculty, staff, and students on privacy, cybersecurity, digital safety, and AI literacy to build confidence in the responsible use of emerging technologies.

General IT Responsibilities

• Contribute to policy development
• Contribute to day-to-day IT operations when needed.

Our commitment to inclusion across gender, age, religion, identity and experience moves us forward and creates a sense of community at HSC that we are proud of, where everyone feels welcome and feels that they belong.

We encourage applicants who may contribute to the further diversification of this community. Pursuant to the Accessibility for Ontarians with Disability Act, if you require accommodations at any time throughout the application process, please contact Human Resources prior to the closing date so the appropriate arrangements can be made.

While we thank all applicants in advance for their interest, only those selected for interviews will be contacted.