Job Description
OverviewThe incumbent represents the Mission and Values of Legal & Immigration Services (LIS). The Information Privacy Analyst is responsible for the management and analysis of sensitive data to ensure compliance with privacy and access regulations and guidelines. This role involves designing and implementing technical solutions for data privacy, conducting privacy audits, and collaborating with various departments to ensure the secure handling of personal and confidential information.The Information Privacy Analyst will work closely with the Secretariat, Information Security Services team in IST, Institutional Analysis and Planning, and other stakeholders to uphold data protection principles within the organization.Reporting directly to the Legal Counsel this position is accountable for risk identification and assessment for compliance of the University’s responsibilities under the provincially mandated Freedom of Information and Protection of Privacy Act (FIPPA). The Legal and Immigration Services team fulfills the University’s obligations under the federal Personal Information Protection and Electronic Documents Act (PIPEDA)ResponsibilitiesData Management and GovernanceOffer guidance to the university community on information and privacy related legislation and organizational policiesEnsure proper data access controls and usage guidelines align with privacy requirementsCollaborate with Legal Counsel, Privacy, on the enhancement of processes to monitor, audit, and improve information and privacy practicesOversee the maintenance of up-to-date records of documents, including inquiries, incidents, and resolutionsAccrue accurate and confidential data and statistics for reporting purposesCoordinate and develop reports for Legal Counsel, Privacy, and General Counsel to inform senior leadership of information and privacy related activities at the UniversityCollaborate with Legal Counsel, Privacy, to provide strategic recommendations and development of policies and procedures related to information and privacyLiaise with government agencies and external professional colleagues, to remain up to date about changes to policies, regulations, and guidelinesPerform environmental scans across industry to be well-informed of information and privacy trendsResponsible for evaluating the effectiveness of information and privacy services at the University, providing recommendations for continuous improvementMaintain best practices for file and information management utilizing the electronic data management system.Privacy Policy and Procedure DevelopmentConsult with Legal Counsel, Privacy, senior leadership, and relevant stakeholders to develop and update privacy policies, procedures, and guidelines in compliance with federal and provincial laws and regulationsCollaborate with departments to identify and classify sensitive data, ensuring proper protection and retention. • Collaborate with cross-functional teams to identify and address data interdependencies that impact privacy complianceDevelop and maintain strong relationships with departmental experts to understand their data usage while aligning with privacy guidelinesDevelop, test, and deploy technical solutions that support data anonymization, encryption, and secure data sharingDesign and maintain data dashboards that provide insights into privacy compliance metricsAssess reporting tools that uphold privacy mandates and contribute to back-end architecture decisionsContribute to the development of advanced privacy analytics methodologies and toolsIdentify opportunities to leverage technology for enhanced privacy self-assessments and decision supportApply analytical skills to identify patterns and develop predictive models related to data breaches and privacy incidentPromote a culture of continuous improvement in terms of efficiency and leveraging systems capacities and technologiesPrivacy Audits and ComplianceMonitor the University’s compliance with relevant laws and regulationsConduct regular audits to identify and mitigate information and privacy risksPartner with departments to identify areas for improving data handling processes while ensuring compliance with access and privacy regulationsFacilitate Privacy Impact Assessments and provide guidance in consultation with Legal Counsel, Privacy, to ensure University projects and processes consider and address privacy issuesAddress gaps and overlaps within data sets, proposing methods to enhance data collection and processing, ensuring data integrity and compliance are maintainedUsing knowledge of best practices, assist in the development of incident response procedures related to data breaches and or privacy incidents, facilitating communication with affect parties and regulatory bodies as requiredParticipate in incident investigations and provide recommendations for corrective action.Develop and Promote Information and Privacy PracticesResponsible for a University culture of privacy and information awareness in collaboration with other stakeholdersDevelop and maintain a communication and education strategy for academic and academic support units to promote and develop privacy protectionProvide training on access and privacy, breach awareness, and privacy-promoting work habitsCoach and train constituents on record-keeping obligationsDesign and execute privacy-related employee surveys to gauge awareness and concernsAnalyze survey data to identify trends and potential issues, providing recommendations for improvementLiaise and consult with other post-secondary Legal and/or Privacy Offices to share access and privacy best practicesQualificationsUniversity degree in relevant field such as Information Management, Privacy, Legal Studies, Data Science, or related field, or equivalent combination of education and experienceRelevant professional designation from the International Association of Privacy Professionals (IAPP) or other recognized professional body is an assetMinimum of 3 years of experience performing significant data analysis, privacy compliance, or work of a related fieldFamiliarity with data governance and privacy regulations is highly preferredKnowledge of relevant data analysis tools and privacy compliance frameworksProject management experience in a complex environmentDemonstrated experience using Microsoft PowerBI and/or TableauProtection and Electronic Documents Act, the Freedom of Information and Protection of Privacy Act, and the Information and Privacy Commissioner of Ontario, including regulations and legislationAbility to understand university guidelines, policies, and practices. Familiarity with the University of Waterloo’s policies and guidelines an assetUnderstanding of access to information and privacy protection matters, and of related legislation and policy in a university or public sector settingCommitment to upholding the highest ethical standards and confidentialityCompetent in providing guidance to others in solving complex situations affecting the University’s businessClear and critical thinking, with strong writing and reasoning skills, problem solving skills, and professional judgementProficient in project management and business analysisAdvanced data analysis skills, and experience with statistical modeling and predictive techniquesStrong verbal and written communication skills to translate information into easily understood terms, summarizing, and presenting information to effectively educate and build awareness of information and privacy regulationsMeticulous attention to detail when reviewing data and documents for complianceAbility to follow formal business practices with high attention to detailAdvanced ability to build standardized reports of relevant data using real-time integrations and in enterprise-grade toolsets such as Microsoft PowerBI and/or TableauAdapts readily and effectively to changing priorities and demandsHighly competent in maintaining confidentiality and treat sensitive information with discretionDemonstrate a high level of professionalism, working effectively and efficiently with internal and external clientsEffective influential and consultative skills with the ability to build strong interpersonal relationshipsAbility to adapt to evolving privacy laws and technologies affecting higher educationProven ability to work independently and resourcefullyDriven by equitable, diverse, and inclusive practicesEquity StatementThe University of Waterloo acknowledges that much of our work takes place on the traditional territory of the Neutral, Anishinaabeg and Haudenosaunee peoples. Our main campus is situated on the Haldimand Tract, the land granted to the Six Nations that includes six miles on each side of the Grand River. Our active work toward reconciliation takes place across our campuses through research, learning, teaching, and community building, and is co-ordinated within the Office of Indigenous Relations.The University values the diverse and intersectional identities of its students, faculty, and staff. The University regards equity and diversity as an integral part of academic excellence and is committed to accessibility for all employees. The University of Waterloo seeks applicants who embrace our values of equity, anti-racism and inclusion. As such, we encourage applications from candidates who have been historically disadvantaged and marginalized, including applicants who identify as First Nations, Métis and/or Inuk (Inuit), Black, racialized, a person with a disability, women and/or 2SLGBTQ+.All qualified candidates are encouraged to apply; however, Canadians and permanent residents will be given priority.The University of Waterloo is committed to accessibility for persons with disabilities. If you have any application, interview, or workplace accommodation requests, please contact Human Resources at hrhelp@uwaterloo.ca or 519-888-4567, ext. 45935.