Privacy Officer & Senior Legal Counsel

FortisBC; Surrey; Hybrid; CAD 132.000 - 156.000; Vollzeit

Benefits dieser Stelle

Flexible work program

Zusammenfassung

FortisBC is seeking a leader to manage its privacy program within the legal department in British Columbia. You will provide legal guidance on privacy, AI, cybersecurity, data governance and contract support for the Information Systems unit.

You will oversee the privacy program, risk management, DPIAs, data storage assessments, breach response, and regulatory liaison, collaborating with business units to embed privacy controls.

Qualifikationen

• JD or professional law degree with good standing in the Law Society of BC.
• Minimum of eight years of post-call experience in a corporate legal department or law firm.
• At least three years’ experience as a compliance or privacy professional.
• Completion of or eligibility for an Information Access & Protection of Privacy program or certification (CIPP/C, CIPM) or Canadian privacy credential.
• Experience in regulated/public sector environments is an asset.

Aufgaben

• Lead and maintain FortisBC's privacy program and serve as liaison with privacy regulators.
• Oversee privacy governance framework, policies, and procedures; embed privacy controls with business units.
• Provide oversight for privacy impact assessments and data storage assessments; manage access requests per storage requirements.
• Oversee privacy incident response, investigations, containment, remediation, and breach reporting.
• Provide legal counsel on privacy, AI, cybersecurity, information systems, and data governance, including trainings.
• Draft and negotiate information systems agreements; monitor regulatory developments and manage external counsel.

Kenntnisse

Privacy governance

Regulatory liaison

Legal counsel

Cybersecurity basics

Ausbildung

Juris Doctor (JD) or Bachelor of Law

Jobbeschreibung

Branch: Non-Regulated

Affiliation: Management & Exempt

Employment Status: Full-Time Regular

Expected Hiring Range: $132,400.00 to $155,700.00

Short-term Incentive Eligible: Yes

Workplace Flexibility: Yes

Posting End Date: Open until filled

As the province's largest energy provider with more than 100 years of knowledge and experience, we proudly deliver renewable energy, natural gas, electricity and propane to 1.3 million customers.

We're actively seeking new talent to join our mission of delivering a stronger energy future in B.C. As one of BC's Top Employers with a diverse team of over 2,700 employees, we are committed to a safe and inclusive culture where each of us can connect, belong, and grow. Join us, and together, let's shape a brighter future for B.C.

Position Overview

This position leads FortisBC's privacy management program, ensuring compliance with privacy legislation and regulatory requirements. The position is part of the FortisBC legal department and will be responsible for providing legal advice on privacy, AI, cybersecurity, data governance, and providing contract support for the Information Systems business unit. It is accountable for privacy program oversight, risk management, privacy impact assessments, data storage assessments, breach response, and serving as a regulatory liaison with privacy regulators.

In this role, you will:

• Act as the organization's designated privacy authority to lead and maintain FortisBC's privacy program and be the primary liaison with privacy regulators as required under applicable legislation.
• Lead the implementation and continuous improvement of the organization’s privacy governance framework, policies, and procedures. Collaborates with business units to embed privacy and related compliance controls into operational processes.
• Provide strategic oversight to the Privacy Advisor role and exercise final review and approval authority for privacy impact assessments and data storage assessments. Oversee the handling of access requests from employees, customers, and external agencies, ensuring compliance with data storage location requirements as required by BCUC.
• Oversee the privacy incident response process, including investigation, documentation, containment, remediation, and reporting. Respond to privacy incidents, breaches and cybersecurity incidents.
• Provide legal counsel on privacy, AI, cybersecurity, information systems, and data governance matters, while delivering privacy training and awareness programs.
• Draft and negotiate information systems agreements, monitor emerging legal and regulatory developments, and manage external legal counsel as required.

What it takes:

• A Bachelor of Law or Juris Doctor degree plus a minimum of eight years of post-call experience in a corporate legal department or law firm, and good standing membership with the Law Society of B.C.
• Minimum of three (3) years’ experience as a compliance or privacy professional.
• Completion of or eligible to complete an Information Access & Protection of Privacy program or certification as a Certified Information Privacy Professional (CIPP/C, CIPM) or other Canadian recognized privacy certification.
• Experience providing legal and privacy advice within a regulated or public sector environment would be an asset.
• Understanding of cybersecurity principles, data governance, and records management.

In this role, you will have the option to participate in a flexible work program, enabling you to work from an approved flex location in British Columbia up to 85 days a year (equivalent to approximately two days a week), subject to business or operational needs.

Our engaging workplace offers a wide range of challenging opportunities, while being safe, inclusive, and diverse. We offer a competitive salary and benefits package, while supporting life-long career development. We also encourage volunteerism and nourish the need to give back to your community.

FortisBC acknowledges and respects Indigenous Peoples in Canada, on whose Traditional Territories we all live and work. FortisBC is committed to Reconciliation with Indigenous Peoples and is guided by our Statement of Indigenous Principles.