The Privacy and Data Manager plays a crucial role in our organization, ensuring enterprise-wide regulatory compliance and safeguarding sensitive information. Your work will be instrumental in maintaining data privacy standards and operational oversight of NCIME’s data processes. The Privacy and Data Manager ensures compliance with relevant Canadian privacy laws and policies and is aligned with the NCIME Indigenous Data Sovereignty Statement and Data Agreements. As the Privacy and Data Manager, you will report to the CEO. Duties and responsibilities will be directed by the Academic Advisory Council and collaborated with the Executive Director Academic.

The Privacy and Data Manager is experienced and trained in the Information Technology industry, developing, and implementing data privacy strategies that safeguard sensitive information from unauthorized access, use, or disclosure. You will comprehensively understand data privacy laws, compliance frameworks, and security protocols, specializing in First Nations, Inuit and Métis data protocols.

Role Responsibilities

• Ensures all business and data management processes reflect privacy requirements and comply with laws, regulations, and Indigenous data sovereignty
• Manage new and existing data agreements between NCIME and its partners and collaborators
• Manage data subject access requests, including responding to inquiries and facilitating data deletion requests
• Develop and implement policies and procedures to safeguard the privacy of Indigenous data
• Conduct privacy impact assessments, monitor and investigate potential data breaches to identify potential risks and recommend mitigation strategies
• Participate in data privacy audits, assessments, and certifications to ensure continuous improvements and compliance
• Maintaining records of all data processing activities conducted by the company, including all processing activities
• Collaborate with cross-functional teams, such as legal, Academic, IT, and security, to ensure alignment on data privacy initiatives
• Willing to travel occasionally and work flexible hours to meet deadlines, as required
• Train and educate employees, the Academic Advisory Council, the Partnership Council, the Board of Directors, and the Elder and knowledge Keepers Council on data privacy practices and raise awareness within organization

QUALIFICATIONS

• Bachelor’s degree in related field such as Business Administration, Law, Managing Information Systems, Social Sciences or a related field with professional qualifications such as Privacy Management or certifications such as PACC/CIPP
• Minimum 5 years of experience in data privacy development and management, demonstrating a comprehensive understanding of the data life cycle
• Practical experience in survey and statistical methodology (descriptive and inferential statistics, survey designs)
• Experience overseeing the design, development, and support of comprehensive data solutions that are secure, scalable, and reliable
• Proven ability to build and maintain collaborative relationships with internal and external stakeholders
• Excellent communication skills, both written and verbal, with the capability to present data insights to non-technical stakeholders effectively
• Analytical mindset with the ability to analyze complex data sets and derive actionable insights
• Strong commitment to Indigenous data sovereignty and cultural sensitivity
• Preference will be given to candidates who identify as First Nations, Inuit, or Métis