Data Protection Specialist (It)

POSITION OVERVIEW
Reporting to IT, this role will support legal and compliance requirements related to privacy laws and overall data protection best practices. To this end, the role will assist with the ongoing administration and use of a consent management system, maintenance of a data inventory as well as operationalizing data protection requirements as necessary. The role will also support data protection tasks within security operations as required. This is an existing vacancy, and this position is a hybrid role based in Toronto.RESPONSIBILITIES
Assist with data protection activities including, the administration of a consent management system, maintenance of a data map, conducting privacy impact and vendor risk assessments, overseeing individual rights requests, and operationalizing privacy and security requirements as necessary.Support the continuous improvement of, and maintenance of, data protection tools, policies, standards, templates, and procedures.Work collaboratively with cross functional partners (Cybersecurity/Technology/Legal/Operations) to initiate privacy and security processes and ensure data protection requirements are met.Integrate data protection into other governance processes and assist in the development of intake channels that alert privacy and security when appropriate (vendor governance, technical project delivery process, data governance processes).Develop and deliver team specific training and guidance to internal audiences for new controls and processes.QUALIFICATIONS
At least 5 years of relevant privacy and data governance experience.A post-secondary degree in related field or combination of education and experience with continuing professional development in privacy and information security risk.Knowledge of Canadian data privacy laws and best practices.Experience with data protection activities such as data mapping, privacy impact assessments and vendor risk assessments.Project and/or program management experience.Familiar with risk management and compliance and able to provide guidance on related matters, including application of policies and procedures.Familiar with technology systems and architecture as it applies to data, e.G. databases, cloud systems, technical integrations, data flows, privacy enhancing technologies and techniques and security controls.Strong leadership skills and ability to communicate clearly and concisely at all levels within an organization.HELPFUL TO HAVE BUT NOT REQUIRED
Experience with privacy, data and security investigations.Experience with consent management systems, vendor risk assessments, PCI compliance, or GRC (Governance, Risk, Compliance).Knowledge of international privacy laws and emerging data and AI governance expectations.Privacy/data protection or security risk management certifications such as CIPP, CIPM, CDPSE, or CRISC.SALARY
The base salary for this role ranges from $107,600 to $123,800 per year. Placement within this range depends on a candidate's level of experience, technical skills, and alignment with the role's requirements. Candidates who have been identified as meeting the role's requirements can expect to be near the midpoint of this range, while the upper end is reserved for those with specialized expertise or a strong track record of success in comparable roles. This role may be eligible for The Globe's Annual Incentive Plan, which is based on a combination of corporate and revenue objectives and rewards individual performance.
#J-18808-Ljbffr