Privacy & Information Management Specialist

Saskatchewan Government Insurance; Regina; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work

Professional development

Job summary

Saskatchewan Government Insurance (SGI) is seeking an experienced privacy and information management leader in Regina. The role focuses on delivering program governance, policy development, and risk mitigation across the corporation.

You will collaborate with legal, security, and business teams to ensure compliance with provincial and federal privacy laws, and oversee audits and vendor engagements. A four-year degree and privacy certifications are preferred, with hybrid work options available.

Qualifications

• Four-year degree in business or information technology or related field.
• Certification in privacy/information management preferred (IAPP or equivalent).
• Six+ years administering privacy or information management programs.

Responsibilities

• Lead privacy and information management programs, policies, and procedures.
• Assess privacy impact assessments and legislation compliance.
• Collaborate with management to mitigate privacy risks and improve governance.
• Review contracts and advise on privacy, ethics, and information management.
• Provide guidance on M365 governance and project privacy requirements.
• Audit privacy and information management processes and report findings.

Skills

Privacy Management

Risk Analysis

Policy Development

Contract Review

Stakeholder Liaison

Education

Bachelor degree in a relevant field

IAPP certification (preferred)

Tools

Microsoft 365

Job description

Do you value integrity and innovation? How about passion and caring? Great! Us too, and that's why you'll fit right in. Our intentional culture promotes trust and participation, encouraging you to bring your heart and mind to work every day.

Out of Scope Temporary Full Time: 8 Months Work Location: ReginaThis role is eligible for hybrid work. This means you’ll have the flexibility of working from home and in the office(in Regina only)on a scheduled rotation, at the manager’s discretion once training requirements have been met. Pay Range: 90,116.00 - 120,147.00 Division: Legal Closes: 30th August 2026

General Accountability The successful candidate will be responsible for leading the delivery of the privacy and information management programs, policies and procedures for the Corporation. This includes understanding and providing recommendations to initiatives across the corporation. This role works collaboratively with multiple levels of management to evaluate privacy and information management risks, in accordance with internal policies, applicable legislation and industry best practices, and aims to provide actionable recommendations to mitigate the risk. Collaborates with business areas to provide innovative solutions and direction on solving problems, incorporating privacy, access, ethics, and information management best practices and aligning with corporate strategy. Provides advice and guidance to business areas, and the privacy, access, ethics, and information team for matters that require interpretation and understanding of the legislation and how it is applied. Responsible for researching and analyzing legislative changes and industry best practices to offer strategic guidance on privacy and information management policies, standards and program objectives. Conducts privacy and information management audits and performs risk analysis.

Key Accountabilities

• Privacy and Information Management Risk and Compliance Analysis Assesses all privacy impact assessments (PIA) for the purpose of evaluating and recommending changes to business practices, policies, operating procedures and controls used to protect the corporation’s information holdings and ensuring compliance with privacy and information management policies, standards, and legislative requirements.
• Assesses and evaluates privacy and information management requirements for procurement documents (e.g. request for proposals), providing opinions and advice on requirements and legislation, evaluating vendors and communicates risks and evaluations with purchasing, vendors and the businesses areas.
• Reviews, problem solves, and provides advice and direction to business areas, through consultative support, related to privacy, access, ethics, and information management, reviewing documents and ensuring the applicable governance and legislative requirements are incorporated into daily operations in alignment with the corporate strategy.
• Collaborates with all business partners to understand and assist in solving problems, providing innovative solutions that consider corporate risks and align with the corporate strategy.
• Collaborates with internal legal counsel and security team to ensure privacy, information management, and security requirements are met by reviewing contracts, identifying gaps, assisting in drafting contract language, providing expertise during contract negotiations with third parties and ensuring compliance throughout the contracted relationship.
• Provides advice and direction through the governance processes for M365, by reviewing business area requests for products and offerings and identifying risks or gaps with current practices.
• Provides consultation services to business areas throughout project stages, including developing privacy and information management requirements, and consulting throughout the project ensuring privacy and information management are embedded by design.
• Executes privacy and information management audits, conducts analysis of audit results for the purpose of evaluating and recommending changes to business practices, policies, operating procedures, and controls used to protect the corporation’s information holdings and ensuring compliance with privacy policies and legislative requirements.
• Produces comprehensive audit reports and risk analyses, articulated in a manner that is consumable to business areas.
• Researches and obtains knowledge of emerging technologies to identify opportunities and evaluate privacy and information management risks.

Privacy and Information Management Program Administration (30%)

Implements strategies for the long-term delivery of privacy, access, ethics, and information management services to the business, this includes researching emerging technologies and legal/regulatory requirements and developing analytics for the ongoing monitoring of the program effectiveness. Drives continuous improvement by regularly updating internal and corporate-wide procedures, including enhancing our privacy, access, ethics, and information management programs (e.g. PIA’s) to maintain compliance and optimize operational efficiency, while ensuring departmental operations are economic and effective. Oversees projects related to privacy and information management, including managing the scope of work, timelines, status, budget, reporting, and communication with vendors or business areas as required. Maintains enterprise-wide records classification and retention schedule that meet legislative, regulatory and business requirements and makes recommendations for improving and implementing the schedule based on consultation with the business areas. Responsible for managing the implementation of vendor contracts and overseeing daily operations including communication with the vendors and business areas. Provides advice and guidance to other privacy and information management employees. Oversees the corporate wide inventories and disposition process, working with the Information Management Coordinators and business areas to ensure appropriate application of legislation, prior to approval by the Designated Records Officer.

Collaboration and Relationship Management

Builds and maintains relationships and collaborates with management throughout the entire corporation. Builds and maintains relationships with vendors. Consults with external agencies, other government agencies, and other stakeholders on industry best practices. Maintains relationships with regulators responsible for privacy and information management.

Leadership

Actively contributes to and supports a culture of a high performing workforce. Participates in divisional succession plans, ensuring ongoing professional and career development and supports development in others. Supports a culture of leadership and accountability to effectively deliver on strategic and corporate strategies. Is actively committed to leadership development across the company, supporting team and workforce readiness through mentoring, training and developmental opportunities.

Corporate Management

Enables the success of programs and policies that are in alignment with corporate, strategic and divisional strategies. Manages risk in area of authority. Ensures that the Health, Safety and Emergency Management Policy is applied in area of responsibility.

Education and Experience

• A four‑year degree from an accredited post‑secondary education institution in a relevant field of study such as business or information technology.
• Recognized certification in privacy and/or information management or other industry recognized areas (e.g. International Association of Privacy Professionals (IAPP) designation).
• Six years’ experience administering a privacy and/or information management program.

Knowledge, Skills and Abilities

• Knowledge of privacy and information management provincial and federal policies and legislation, including Saskatchewan’s The Freedom of Information and Protection of Privacy Act, The Health Information Protection Act, and The Archives and Public Records Management Act, British Columbia’s Personal Information Protection Act, Alberta’s Personal Information Protection Act, and Canada’s Personal Information Protection and Electronic Documents Act.
• Knowledge of privacy, information management, risk management, and compliance methodologies.
• Knowledge of privacy and information management best practices, concepts, lifecycles, tools, procedures and practices.
• Knowledge of electronic records management technology solutions and trends.
• Knowledge of privacy and information governance trends.
• Knowledge of investigative techniques.
• Knowledge of organizational structure, business processes, and how they interact to support insurance operations.
• Knowledge of SGI corporate policies, standards, and procedures and how they impact initiatives.
• Skills to consult and communicate with individuals at all levels of the organization.
• Skill in coordinating multiple timelines to ensure critical deadlines are met.
• Skill in analytical and critical thinking to determine business needs and provide recommendations and innovative solutions.
• Ability to understand how privacy, access, ethics and information management principles and trends impact SGI’s business and corporate strategy to drive value.
• Ability to write and communicate clearly, and concisely to targeted audiences.
• Ability to visually present and communicate risk analysis and mitigations strategies.
• Ability to use critical thinking and problem-solving skills to identify risks and propose new approaches to business areas to mitigate risks.
• Ability to connect and build business relationships.

Commitment to Inclusive Culture

At SGI, we are committed to a workplace where people feel respected, valued, and able to contribute fully. Through fair, consistent, and transparent people practices, we attract skilled talent with varied lived experiences and offer meaningful work, opportunities for growth, and a strong sense of belonging. Our commitment to reconciliation includes inclusive hiring practices that create meaningful opportunities for Indigenous peoples and support a workforce reflective of the communities we serve. Join us in building a culture where contributions are valued and shared success is shaped by our people.

We also believe in you and your future career aspirations. Regardless of where you start, SGI and SGI CANADA will invest in you by supporting education, accreditation and professional development.

SGI has offered affordable insurance products and great service to our customers since 1945. SGI has 2 distinct operations — the Saskatchewan Auto Fund and SGI CANADA. The Auto Fund is Saskatchewan’s compulsory auto insurance program, operating the driver licensing and vehicle registration system. SGI CANADA is the property and casualty insurance division which offers products in Saskatchewan, British Columbia, Alberta, Manitoba and Ontario through a network independent insurance brokerages.

SGI and SGI CANADA are Crown corporations, owned by the Government of Saskatchewan. Our culture is one of personal accountability, where all of us are empowered to be leaders. We encourage a growth mindset that sees change as an opportunity to learn, innovate and continuously improve. We value respectful collaboration and open communication where your voice is welcome and appreciated. Each of us has a role in SGI and SGI CANADA’s success and we acknowledge everyone’s contributions.

We care about each other. We treat one another with kindness and celebrate each person’s uniqueness so we can all be our authentic selves at work. That’s because diversity, equity and inclusion are foundational to our culture and who we are. Different backgrounds and perspectives make for a vibrant and creative community where innovation flourishes.

Pay Range: $90,116.00 - $120,147.00 Posting Close Date: August 30, 2026