Privacy Compliance Specialist

407 Etr; Vaughan; On-site; CAD 65,000 - 90,000; Full time

Job summary

407 ETR is seeking a Privacy Compliance Specialist to support the Privacy Office and Privacy Program from their Woodbridge, ON location. The role collaborates with the Senior Legal Counsel, Privacy Officer, and business stakeholders to advance governance, risk management, and regulatory compliance.

Key duties include updating policies, delivering training, performing privacy impact assessments, handling incidents, and responding to privacy requests.

Qualifications

• 3-5 years in a privacy compliance or program management function.
• Degree, diploma and/or certification in privacy strongly preferred (e.g., CIPP/C, CIPPM, AIGP).
• Must have good working knowledge of federal and provincial privacy laws in Canada.
• Knowledge of European and US privacy laws an asset.

Responsibilities

• Support day-to-day operations of the Privacy Office and Privacy Program.
• Administer/maintain Privacy Governance, Risk and Compliance processes with data stakeholders.
• Update privacy policies, procedures and terms; manage training and awareness.
• Assist with privacy impact and compliance assessments and incident responses.
• Support responses to FIPPA requests and data governance activities.

Skills

Privacy governance

Communication

Attention to detail

Time management

Confidentiality

Education

Privacy certification (CIPP/C, CIPPM, AIGP)

Legal studies background

Tools

Microsoft 365

ServiceNow

SharePoint

Job description

Title: Privacy Compliance SpecialistDepartment: LegalLocation: 6300 Steeles Ave. West, WoodbridgeWork Arrangement: On-siteTotal Compensation Potential: $65,000 - $90,000Position Summary: The Privacy Specialist supports the day-to-day operations of 407 ETR’s Privacy Office by managing privacy compliance activities, responding to privacy-related matters, and helping maintain the organization’s Privacy Program. Working closely with the Senior Legal Counsel & Privacy Officer, this role partners with stakeholders across the business to support privacy governance, risk management, policy development, training, incident response, and regulatory compliance, helping ensure personal information is handled responsibly and in accordance with applicable privacy laws and company standards.Duties and Responsibilities:Be a key member and representative of 407 ETR’s Privacy Office, upholding all aspects of 407 ETR’s Privacy Mission Statement in carrying out all responsibilities.Help manage 407 ETR’s Privacy Program which includes:Administering/maintaining the Privacy Governance, Risk and Compliance (GRC) process, including working directly with data stakeholders to execute the Privacy GRCPrivacy impact and compliance assessmentsUpdating privacy policies, procedures and terms, including the Privacy Office intranetTraining and awareness activities, including keeping updated on data protection, cybersecurity, and AI laws and best practicesRisk identification, logging and remediation activitiesInternal and external records management, retention, and destruction supportSupport responses to FIPPA requests as it relates to the organizationSupport privacy, data governance and AI -related activities or researchSupport privacy and information security incident responses, including being involved in incident response planning and implementation.Work with key stakeholder groups to address customer complaints and inquiries, including opt-out and personal data access requests.Other related duties to meet ongoing needs of the Privacy Office and the Legal Department.Qualifications:3-5 years in a privacy compliance or program management function.Degree, diploma and/or certification in privacy strongly preferred (e.g., CIPP/C, CIPPM, AIGP).Must have good working knowledge of federal and provincial privacy laws in Canada.Knowledge of European and US privacy laws an asset.Post-secondary education in legal studies or equivalent an asset.Proficient with Microsoft 365, ServiceNow, and SharePoint.Self-motivated, strong communicator with a good sense of judgment on sensitive issues.Able to handle daily matters with the utmost confidentiality.Well-developed organization, prioritization and time management skills.Strong attention to detail and commitment to accuracy.Strong service-oriented mindset with ability to deal in a professional manner.Ability to work well under pressure to ensure critical deadlines are met.We are actively seeking to fill this role as it is a current vacancy.About 407 ETRHighway 407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east.407 International Inc. is the sole shareholder of 407 ETR and is owned by:Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%)Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%)Public Sector Pension Investment Board (PSP Investments) (7.51%)Learn more at 407etr.comNote: At 407 ETR, we are committed to fostering a diverse, equitable, and inclusive work environment. We value the unique perspectives and backgrounds of all individuals, and we firmly believe that our individual differences make us stronger as a whole.Our commitment to inclusion extends beyond recruitment and encompasses an inclusive workplace culture through raising awareness, ongoing training, and encouraging feedback. We aim to create a safe and supportive environment where all employees can thrive.Accommodation for disabilities or other grounds protected by human rights legislation are available upon request for candidates taking part in all aspects of the employment selection process.