Privacy and Information Governance Advisor (Contract)

ascio is hiring a Privacy and Information Governance Advisor to support our privacy, information governance and data protection work across a range of organizations and technology environments.

This role will conduct privacy impact assessments, review records and information management practices, assess compliance with applicable Canadian privacy and access legislation, and provide practical recommendations for improving privacy and information governance.

Responsibilities

1. Conduct privacy impact assessments and develop personal information inventories and data flow maps.
2. Review records and information management practices, including retention, disposition and information lifecycle controls.
3. Assess compliance with applicable federal, provincial and territorial privacy and access legislation.
4. Identify privacy risks and document findings against applicable statutory, regulatory and policy requirements.
5. Advise on privacy breach assessment, response, documentation and notification requirements.
6. Review privacy and information governance policies, procedures and controls.
7. Recommend practical improvements to privacy practices, training, processes and supporting technology.
8. Provide clear advice and reporting to both technical and non-technical audiences.

Required Skills and Experience

1. Six or more years of experience in privacy, access to information, information governance or a closely related field.
2. Strong experience conducting privacy impact assessments.
3. Experience reviewing records and information management practices, including retention and disposition.
4. Demonstrated experience assessing compliance with Canadian federal, provincial or territorial privacy and access legislation.
5. Experience developing personal information inventories and mapping personal information and data flows.
6. Experience reviewing or supporting privacy breach response and notification.
7. Knowledge of information protection and governance technologies such as Microsoft Purview or comparable platforms.
8. Strong written communication skills, including the ability to explain privacy and information governance requirements clearly to non-specialist audiences.

Qualifications

1. One or more current privacy certifications such as CIPP/C, CIPM or CIPT.
2. Applicants must be able to provide certification status and expiry or renewal dates, where applicable.
3. Degree in law, public administration, information management or a related field, or equivalent professional experience.
4. Records and information management certifications such as CRM or IGP are considered assets.

Preferred Experience

1. Access to information request handling.
2. Privacy program design and implementation.
3. Data classification, retention scheduling and information lifecycle management.
4. Privacy by design in system implementations and technology projects.
5. Third-party privacy and data-processing assessments.
6. Cloud and SaaS privacy assessments.
7. Experience integrating privacy requirements with information security or data governance programs.

Location and Work Arrangement

1. Remote within Canada.
2. Some assignments may require occasional onsite work or travel within Canada.
3. Applicants must be based in Canada and legally entitled to work in Canada.
4. A criminal record check may be required before access to sensitive systems, information or environments.