Privacy Compliance Specialist

407 ETR Concession Company Limited; Vaughan; On-site; CAD 65,000 - 90,000; Full time

Job summary

407 ETR Concession Company Limited is hiring a Privacy Compliance Specialist to support the Privacy Office. You will help manage the privacy program, coordinate governance, risk, and compliance activities, and respond to privacy matters in partnership with the Legal Department.

The role emphasizes policy updates, staff training, incident response, and regulatory compliance to ensure personal information is handled with confidentiality and in line with laws and company standards.

Qualifications

• 3-5 years in a privacy compliance or program management function.
• Degree, diploma and/or certification in privacy strongly preferred (e.g., CIPP/C, CIPPM, AIGP).
• Good working knowledge of federal and provincial privacy laws in Canada.

Responsibilities

• Be a key member and representative of 407 ETR’s Privacy Office and uphold the Privacy Mission.
• Manage the Privacy Program including GRC processes and privacy assessments.
• Update privacy policies, procedures and the intranet; training and awareness activities.
• Assist with risk identification, logging and remediation activities.
• Support responses to FIPPA requests and incident response planning.

Skills

Privacy compliance

Program management

Stakeholder communication

Education

Privacy certification (CIPP/C, CIPPM, AIGP)

Legal studies background

Tools

Microsoft 365

ServiceNow

SharePoint

Job description

Privacy Compliance Specialist

Department: Legal

Location: 6300 Steeles Ave. West, Woodbridge

Work Arrangement: On-site

Total Compensation Potential: $65,000 - $90,000

Position Summary

The Privacy Specialist supports the day-to-day operations of 407 ETR’s Privacy Office by managing privacy compliance activities, responding to privacy-related matters, and helping maintain the organization’s Privacy Program. Working closely with the Senior Legal Counsel & Privacy Officer, this role partners with stakeholders across the business to support privacy governance, risk management, policy development, training, incident response, and regulatory compliance, helping ensure personal information is handled responsibly and in accordance with applicable privacy laws and company standards.

Duties and Responsibilities

• Be a key member and representative of 407 ETR’s Privacy Office, upholding all aspects of 407 ETR’s Privacy Mission Statement in carrying out all responsibilities.
• Help manage 407 ETR’s Privacy Program which includes:
• Administering/maintaining the Privacy Governance, Risk and Compliance (GRC) process, including working directly with data stakeholders to execute the Privacy GRC Privacy impact and compliance assessments
• Updating privacy policies, procedures and terms, including the Privacy Office intranet
• Training and awareness activities, including keeping updated on data protection, cybersecurity, and AI laws and best practices
• Risk identification, logging and remediation activities
• Internal and external records management, retention, and destruction support
• Support responses to FIPPA requests as it relates to the organization
• Support privacy, data governance and AI -related activities or research
• Support privacy and information security incident responses, including being involved in incident response planning and implementation.
• Work with key stakeholder groups to address customer complaints and inquiries, including opt-out and personal data access requests
• Other related duties to meet ongoing needs of the Privacy Office and the Legal Department

Qualifications

• 3-5 years in a privacy compliance or program management function. Degree, diploma and/or certification in privacy strongly preferred (e.g., CIPP/C, CIPPM, AIGP). Must have good working knowledge of federal and provincial privacy laws in Canada. Knowledge of European and US privacy laws an asset. Post-secondary education in legal studies or equivalent an asset. Proficient with Microsoft 365, ServiceNow, and SharePoint. Self-motivated, strong communicator with a good sense of judgment on sensitive issues. Able to handle daily matters with the utmost confidentiality. Well-developed organization, prioritization and time management skills. Strong attention to detail and commitment to accuracy. Strong service-oriented mindset with ability to deal in a professional manner. Ability to work well under pressure to ensure critical deadlines are met.

We are actively seeking to fill this role as it is a current vacancy.

About 407 ETR Highway

407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east.

407 International Inc. is the sole shareholder of 407 ETR and is owned by: Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%) Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%) Public Sector Pension Investment Board (PSP Investments) (7.51%) Learn more at 407etr.com

Note: At 407 ETR, we are committed to fostering a diverse, equitable, and inclusive work environment. We value the unique perspectives and backgrounds of all individuals, and we firmly believe that our individual differences make us stronger as a whole. Our commitment to inclusion extends beyond recruitment and encompasses an inclusive workplace culture through raising awareness, ongoing training, and encouraging feedback. We aim to create a safe and supportive environment where all employees can thrive. Accommodation for disabilities or other grounds protected by human rights legislation are available upon request for candidates taking part in all aspects of the employment selection process.

About 407 ETR Highway

Highway 407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east. 407 International Inc. is the sole shareholder of 407 ETR and is owned by: Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%) Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%) Public Sector Pension Investment Board (PSP Investments) (7.51%)