Description
The City of Edmonton is seeking an experienced and highly strategic Corporate Privacy Manager to assume leadership of the Corporate Privacy Team and manage the organization's comprehensive and legislated Privacy Management Program (PMP). This senior position is essential for ensuring strict compliance with the Protection of Privacy Act (POPA).
As the City's foremost privacy management expert, you will be responsible for developing and institutionalizing administrative policies, mandatory employee training, and the formal process for Privacy Impact Assessments (PIAs), including submissions to the OIPC. A core function of the role is to coordinate and manage sensitive responses to privacy incidents and complaints, requiring engagement with Legal Services, Executive leadership, and external regulatory bodies.
The successful candidate must possess a strong strategic focus and the ability to navigate complex governance challenges, balancing the need for independent, objective decision-making with the requirement to maintain positive, collaborative relationships amid constant, high-level scrutiny from the public, Executive, Council, and media.
What will you do?
- Produce the operational strategy and framework to meet legislative requirements under the Protection of Privacy Act (POPA) and support corporate-wide compliance
- Develop policies, policy tools, and standard operating procedures (SOPs) to support compliance, including rules for automated systems and artificial intelligence
- Facilitate the successful development and implementation of the mandatory Privacy Impact Assessment (PIA) process, and oversee submissions to the OIPC
- Oversee all aspects of privacy incident management, including assessment, containment, mitigation, and coordinating mandatory notifications and reporting
- Coordinate the City's responses to all privacy-related reviews and investigations initiated by the Office of the Information and Privacy Commissioner (OIPC)
- Provide leadership and management for the Corporate Privacy Team, including the full HR life cycle (recruitment, training, performance management) for staff
- Develop and deliver standard operating procedures and training to assist all City areas in understanding the authorized collection, use, and disclosure of personal information
- Conduct interviews, in collaboration with labour relations, concerning employees involved in privacy incidents
- Provide reporting to the Access and Privacy Head and executives on the Privacy Management Program's performance, including monitoring qualitative and quantitative metrics
- Oversee the completion of privacy due diligence reviews for third-party vendors and service providers to ensure contractual and operational compliance
Apply on company website