Privacy Officer & Senior Legal Counsel

RiseMe; Surrey; Hybrid; CAD 126,000 - 148,000; Full time

Benefits offered by this job

Flexible work program

Short-term incentive eligibility

Job summary

FortisBC is seeking a senior privacy leader to manage its privacy program within the Legal department. The role focuses on privacy, AI, cybersecurity, data governance, and contract support for the Information Systems unit.

The successful candidate will oversee risk management, privacy impact assessments, breach response, and regulatory liaison, with a strong emphasis on compliance and privacy training.

Qualifications

• Bachelor of Law or Juris Doctor required and active Law Society of B.C. membership.
• Minimum 8 years post-call experience in corporate legal dept or law firm.
• Minimum 3 years as a compliance or privacy professional.
• Certified Information Privacy Professional (CIPP/C, CIPM) or Canadian privacy certification preferred.
• Understanding of cybersecurity, data governance and records management.

Responsibilities

• Act as FortisBC’s designated privacy authority and primary liaison with privacy regulators under applicable law.
• Lead the privacy governance framework, policies, and procedures across units.
• Oversee privacy impact assessments and data storage assessments; manage access requests per storage requirements.
• Oversee privacy incident response, investigation, containment, remediation and reporting.
• Provide legal counsel on privacy, AI, cybersecurity, information systems and data governance.
• Draft and negotiate information systems agreements; monitor regulatory developments.

Job description

Branch: Non-Regulated
Affiliation: Management & Exempt
Employment Status: Full-Time Regular
Expected Hiring Range: $126,100.00to $148,300.00
Short-term Incentive Eligible: Yes
Workplace Flexibility:Yes
Posting End Date: Open until filled

As the province’s largest energy provider with more than 100 years of knowledge and experience, we proudly deliver renewable energy, natural gas, electricity and propane to 1.3 million customers.

We're actively seeking new talent to join our mission of delivering a stronger energy future in B.C. As one of BC's Top Employers with a diverse team of over 2,700 employees, we are committed to a safe and inclusive culture where each of us can connect, belong, and grow. Join us, and together, let's shape a brighter future for B.C.

Position Overview

This position leads FortisBC’s privacy management program, ensuring compliance with privacy legislation and regulatory requirements. The position is part of the FortisBC legal department and will be responsible for providing legal advice on privacy, AI, cybersecurity, data governance, and providing contract support for the Information Systems business unit. It is accountable for privacy program oversight, risk management, privacy impact assessments, data storage assessments, breach response, and serving as a regulatory liaison with privacy regulators.

In this role, you will:

• Act as the organization’s designated privacy authority to lead and maintain FortisBC’s privacy program and be the primary liaison with privacy regulators as required under applicable legislation.
• Lead the implementation and continuous improvement of the organization’s privacy governance framework, policies, and procedures. Collaborates with business units to embed privacy and related compliance controls into operational processes.
• Provide strategic oversight to the Privacy Advisor role and exercise final review and approval authority for privacy impact assessments and data storage assessments. Oversee the handling of access requests from employees, customers, and external agencies, ensuring compliance with data storage location requirements as required by BCUC.
• Oversee the privacy incident response process, including investigation, documentation, containment, remediation, and reporting. Respond to privacy incidents, breaches and cybersecurity incidents.
• Provide legal counsel on privacy, AI, cybersecurity, information systems, and data governance matters, while delivering privacy training and awareness programs.
• Draft and negotiate information systems agreements, monitor emerging legal and regulatory developments, and manage external legal counsel as required.

What it takes:

• A Bachelor of Law or Juris Doctor degree plus a minimum of eight years of post-call experience in a corporate legal department or law firm, and good standing membership with the Law Society of B.C.
• Minimum of three (3) years’ experience as a compliance or privacy professional.
• Completion of or eligible to complete an Information Access & Protection of Privacy program or certification as a Certified Information Privacy Professional (CIPP/C, CIPM) or other Canadian recognized privacy certification.
• Experience providing legal and privacy advice within a regulated or public sector environment would be an asset.
• Understanding of cybersecurity principles, data governance, and records management.

In this role, you will have the option to participate in a flexible work program, enabling you to work from an approved flex location in British Columbia up to 85 days a year (equivalent to approximately two days a week), subject to business or operational needs.

Our engaging workplace offers a wide range of challenging opportunities, while being safe, inclusive, and diverse. We offer a competitive salary and benefits package, while supporting life-long career development. We also encourage volunteerism and nourish the need to give back to your community.

FortisBC acknowledges and respects Indigenous Peoples in Canada, on whose Traditional Territories we all live and work. FortisBC is committed to Reconciliation with Indigenous Peoples and is guided by our Statement of Indigenous Principles.

#LI-Hybrid