Manager, Privacy and AI Governance

HILLFIELD STRATHALLAN COLLEGE; Hamilton; On-site; CAD 76,000 - 115,000; Full time

Job summary

The Manager, Privacy and AI Governance at HSC Corporation in Hamilton, ON leads privacy, data protection, and responsible information use in a PreK–12 school environment. Reporting to the Director of Technology Integration & Innovation, this role is embedded in the IT team to operationalize privacy across systems and student-facing technologies.

The successful candidate collaborates with College staff, parents, and students to translate privacy obligations into practical safeguards.

Qualifications

• Degree or diploma in Information Technology, Information Systems, Computer Science, or a closely related field.
• Formal training or demonstrated professional experience in privacy management, including Privacy Impact Assessments (PIAs), Records of Processing Activities (ROPAs), or vendor assessments.
• Experience working within an IT or technology team, contributing to system design, access controls, and data flows.
• Strong knowledge of Canadian privacy legislation, including PIPEDA and PHIPA.
• Demonstrated understanding of AI tools and their implications for privacy, information security, and responsible use, with the ability to translate risks into practical safeguards.
• Experience in an educational, healthcare, public sector, or other regulated environment (preferred).
• Privacy certifications such as CIPP/C, CIPM, or CIPT (preferred).
• Working knowledge of cybersecurity practices to collaborate with security specialists.
• Experience supporting or interacting with students in a school setting (preferred).
• Experience developing AI governance practices, assessing AI vendors, or supporting responsible AI adoption in education or organizations.

Responsibilities

• Lead the College’s Privacy and Data Protection Program embedded within IT operations.
• Maintain Records of Processing Activities (ROPAs) and conduct PIAs with focus on student data and emerging technologies.
• Perform vendor privacy assessments and collaborate with IT on security reviews.
• Operationalize compliance with PIPEDA, PHIPA, and applicable legislation through system design and access controls.
• Develop, implement, and maintain privacy policies, notices, and consent practices for a school community.
• Oversee privacy-related staff awareness and training; collaborate on phishing simulations and security awareness.
• Contribute to IT Risk Register and support annual cyber insurance renewal from a privacy perspective.
• Provide guidance on responsible technology adoption and long-term digital strategy, including AI governance.

Skills

Privacy management

Data protection

AI governance

PIAs (Privacy Impact Assessments)

ROPAs

Vendor privacy assessments

Privacy legislation (PIPEDA/PHIPA)

Education sector privacy

Education

IT/CS degree or diploma

Privacy certifications (CIPP/C, CIPM, CIPT)

Job description

Salary Range: $76,393.00 To $114,589.00 Annually

Manager, Privacy and AI Governance

Location: Hamilton, ON Work arrangement: On-site position; not available for remote work
Vacancy Status: 1 available vacancy
Salary:$76,393 to $114,589

Position Overview

The Privacy and AI Governance Manager is an IT-embedded role focused on implementing privacy, data protection, and responsible information use in a PreK–12 school environment. Reporting to the Director of Technology Integration & Innovation, this position serves as a full member of the IT team, operationalizing privacy requirements across systems, workflows, and student-facing technologies.

The successful candidate will be a hands-on team member who enjoys collaborating with College employees, parents, and students to translate privacy obligations into workable technical and procedural solutions. This is not a legal or advisory-only role. The role partners closely with the existing IT team and cybersecurity expertise to ensure a secure, ethical, and future-ready digital environment.

As AI becomes increasingly integrated into education and College operations, this role will help ensure HSC remains forward-thinking in its adoption of emerging technologies. Working with the Director of Technology Integration & Innovation, the Manager will support purposeful innovation that strengthens teaching, learning, efficient collaboration, and operational effectiveness while protecting the privacy, safety, and wellbeing of students, faculty, staff, and families.

This position requires a daily on-site presence in Hamilton, ON and is not available for remote work or telecommuting.

All interviews will be conducted in person.

Qualifications

Required:

Degree or diploma in Information Technology, Information Systems, Computer Science, or a closely related field.

Formal training or demonstrated professional experience in privacy management, including Privacy Impact Assessments (PIAs), Records of Processing Activities (ROPAs), or vendor assessments.

Experience working within an IT or technology team, contributing to system design, access controls, and data flows.

Strong knowledge of Canadian privacy legislation, including PIPEDA and PHIPA.

Demonstrated understanding of AI tools and their implications for privacy, information security, and responsible use, with the ability to translate risks into practical safeguards.

Preferred:

Experience in an educational, healthcare, public sector, or other regulated environment.

Privacy certifications such as CIPP/C, CIPM, or CIPT.

Working knowledge of cybersecurity practices sufficient to collaborate effectively with security specialists.

Experience supporting or interacting with students in a school setting.

Experience developing AI governance practices, assessing AI vendors, or supporting responsible AI adoption in an educational or organizational setting.

Responsibilities

Privacy, Data Protection & Risk

Lead the College’s Privacy and Data Protection Program, embedded within IT operations.

Maintain Records of Processing Activities (ROPAs) and conduct Privacy Impact Assessments (PIAs), with particular attention to student data and emerging technologies.

Perform vendor privacy assessments and collaborate with IT on associated security reviews.

Operationalize compliance with PIPEDA, PHIPA, and applicable legislation through system design, access controls, and documented processes.

Develop, implement, and maintain privacy policies, standards, notices, and consent practices appropriate to a school community.

Oversee privacy-related staff awareness and training; collaborate with IT on phishing simulations and security awareness initiatives.

Contribute to the IT Risk Register and support annual cyber insurance renewal from a privacy and governance perspective.

Digital & Data Governance

Support alignment of on-premises and cloud systems within a cohesive digital ecosystem.

Maintain IT governance standards, workflows, and approval processes.

Contribute to advancing the College-wide data governance framework, including data quality, lifecycle management, and integrations.

Collaborate with departments to standardize dashboards, analytics, and reporting practices.

Partner with the Director of Technology Integration & Innovation to develop and implement the College’s responsible AI framework, supporting educational innovation, operational improvement, and safe use.

Proactively identify, evaluate, and pilot emerging tools, including AI, automation, and workflow platforms, weighing educational and operational benefits against privacy and security risks.

Advise on responsible technology adoption and long-term digital strategy, helping the College anticipate and respond to technological change.

Assess how AI providers collect, retain, share, and use College information, including whether they use data to train models or pass it to third-party services.

Establish practical safeguards for student and employee information, images, confidential materials, and College branding when using AI tools.

Maintain clear processes for reviewing, approving, and periodically reassessing AI tools as their capabilities, terms, and data practices evolve.

Collaborate with faculty, staff, and students to develop guidance on AI accuracy, bias, transparency, academic integrity, and appropriate human oversight.

Monitor developments in AI and emerging technologies and translate them into timely recommendations, updated guidance, and training for the College community.

Communicate risks, opportunities, and best practices clearly to non-technical audiences, supporting informed and confident technology use.

Student & School Community Support

Work collaboratively with students, faculty, advisors, and school leaders to support privacy-related concerns, digital conduct, and responsible technology use.

Contribute to student-centred responses to privacy or digital incidents, balancing compliance, education, and wellbeing.

Provide guidance that is developmentally appropriate and aligned with the College’s educational mission and Code of Conduct.

Partner with the IT Manager to respond to cybersecurity incidents, privacy breaches, and disaster recovery events, emphasizing prevention and learning.

Support investigations related to privacy, cybersecurity, and digital conduct using a proactive, educational approach.

Maintain incident response plans and assist with tabletop exercises and business continuity planning.

Mentor IT staff, co-op students, and new team members on matters related to privacy and information security.

Deliver practical workshops for parents, faculty, staff, and students on privacy, cybersecurity, digital safety, and AI literacy to build confidence in the responsible use of emerging technologies.

General IT Responsibilities

Contribute to policy development

Contribute to day-to-day IT operations when needed.

This school uses artificial intelligence (AI) tools to assist with certain aspects of the hiring process, which may include screening, assessing, or selecting applicants.

Our commitment to inclusion across gender, age, religion, identity and experience moves us forward and creates a sense of community at HSC that we are proud of, where everyone feels welcome and feels that they belong.

We encourage applicants who may contribute to the further diversification of this community. Pursuant to the Accessibility for Ontarians with Disability Act, if you require accommodations at any time throughout the application process, please contact Human Resources prior to the closing date so the appropriate arrangements can be made.

While we thank all applicants in advance for their interest, only those selected for interviews will be contacted.