Privacy Lead

In support of Infoway's Legal, Privacy, Governance, Risk and Compliance program, the Privacy Lead is responsible for the delivery and continuous improvement of Infoway's privacy program. The role provides privacy expertise to support corporate operations, organizational initiatives and projects and leads the day-to-day execution of privacy program activities, including privacy impact assessments, privacy risk management, incident response, stakeholder engagement, and privacy awareness. The Privacy Lead ensures privacy requirements and obligations are effectively addressed across the organization.

Responsibilities

• Leads the day-to-day operation and continuous improvement of Infoway's privacy program, ensuring privacy requirements and obligations are effectively integrated into corporate operations, organizational initiatives, projects, and programs.
• Provides expert privacy advice and consultation to internal and external stakeholders, supporting informed decision-making and the timely resolution of privacy-related matters.
• Leads Privacy Impact Assessments (PIAs) and related privacy reviews, including documenting analysis and findings, recommending mitigation measures, and supporting the implementation of risk treatment activities.
• Identifies, assesses, tracks, manages, and reports on privacy risks across projects, corporate initiatives, vendor arrangements, and stakeholder engagements, escalating significant risks and issues as appropriate.
• Develops, implements, and continuously improves privacy policies, procedures, standards, requirements, tools, guidance, and related documentation to support an effective and sustainable privacy program and enable privacy-by-design across corporate operations, organizational initiatives, and digital health programs.
• Manages operational privacy processes, including privacy incidents, access to information and privacy requests, inquiries, complaints, reporting, and corrective actions, ensuring matters are addressed consistently, effectively and in accordance with applicable requirements.
• Partners with project teams, business leaders, and external stakeholders to identify and address privacy considerations, develop solutions to privacy-related issues, and support compliance with legislative, regulatory, and contractual privacy requirements to enable the successful delivery of organizational priorities and digital health initiatives.
• Leads the development and delivery of privacy and security training, awareness initiatives, communications, and reporting to promote a strong culture of privacy across the organization.
• Leads the planning and execution of Infoway's annual Privacy Forum and supports privacy-related consultations, working groups, and stakeholder engagements with jurisdictions, regulators, and other partners.

Education

• Undergraduate degree in a relevant discipline, or an equivalent combination of education, training, and experience.

Requirements

• Undergraduate degree in a relevant discipline, or an equivalent combination of education, training, and experience.
• 7+ years of hands-on experience in privacy program management and delivery, including leading Privacy Impact Assessments, managing privacy risks, and advising on privacy requirements in a complex or regulated environment.
• Strong knowledge of Canadian privacy legislation and regulatory frameworks, including federal, provincial, and territorial privacy requirements, with particular knowledge of Ontario and Quebec privacy and health information legislation.
• Professional privacy certification (e.g., CIPP/C, CIPM) is an asset.

Key Competencies

• Strong analytical, organizational, and problem-solving skills, with a proactive, results-oriented approach and a demonstrated ability to drive work to completion.
• Excellent communication, consultation, and stakeholder management skills with the ability to influence, collaborate and build consensus across diverse stakeholder groups.
• Ability to manage multiple priorities, work independently, and deliver results proactively.
• Ability to translate legislative and policy requirements into practical business solutions.
• Bilingualism (English and French) is an asset.