Privacy & Data Governance Lead – Legal Counsel (Hybrid)

RiseMe; Surrey; Hybrid; CAD 126,000 - 148,000; Full time

Benefits offered by this job

Flexible work program

Short-term incentive eligibility

Job summary

FortisBC is seeking a senior privacy leader to manage its privacy program within the Legal department. The role focuses on privacy, AI, cybersecurity, data governance, and contract support for the Information Systems unit.

The successful candidate will oversee risk management, privacy impact assessments, breach response, and regulatory liaison, with a strong emphasis on compliance and privacy training.

Qualifications

• Bachelor of Law or Juris Doctor required and active Law Society of B.C. membership.
• Minimum 8 years post-call experience in corporate legal dept or law firm.
• Minimum 3 years as a compliance or privacy professional.
• Certified Information Privacy Professional (CIPP/C, CIPM) or Canadian privacy certification preferred.
• Understanding of cybersecurity, data governance and records management.

Responsibilities

• Act as FortisBC’s designated privacy authority and primary liaison with privacy regulators under applicable law.
• Lead the privacy governance framework, policies, and procedures across units.
• Oversee privacy impact assessments and data storage assessments; manage access requests per storage requirements.
• Oversee privacy incident response, investigation, containment, remediation and reporting.
• Provide legal counsel on privacy, AI, cybersecurity, information systems and data governance.
• Draft and negotiate information systems agreements; monitor regulatory developments.

Job description

FortisBC is seeking a senior privacy leader to manage its privacy program within the Legal department. The role focuses on privacy, AI, cybersecurity, data governance, and contract support for the Information Systems unit.

The successful candidate will oversee risk management, privacy impact assessments, breach response, and regulatory liaison, with a strong emphasis on compliance and privacy training.