Job Type: Employee
Anticipated Duration in Months (for contracts and temporary assignments): N/A
Job Family: Governance and Risk
# of Open Positions: 1
Faculty/Service - Department: Access to Information and Privacy Office
Campus: Main Campus
Union Affiliation: N/A
Date Posted (YYYY/MM/DD): 2026/08/17
Applications must be received BEFORE (YYYY/MM/DD): 2026/08/31
Hours per week: 35
Salary Grade: Non-Union Grade NM1
Salary Range: $107 503,00 - $134 379,00
Position Purpose The Lead Advisor, Privacy supports the development, implementation, and ongoing enhancement of the University's privacy management program, and leads the Privacy Impact Assessment (PIA) process to identify and manage privacy considerations related to the collection, use, disclosure, retention, and protection of personal information across the University. This role works with a broad range of stakeholders to advance a consistent, coordinated approach to privacy compliance, embedding privacy requirements into university initiatives, systems, research activities and third-party relationships.Acting as a subject matter expert in applicable privacy legislation and best practices, including Freedom of Information and Protection of Privacy Act (FIPPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Health Information Protection Act (PHIPA), and the General Data Protection Regulation (GDPR), the Lead Advisor ensures privacy assessments, controls, and guidance are incorporated into University programs, projects, and decision‑making. The role also supports the administration and continuous improvement of privacy breach and complaint management processes, assisting in the response to incidents and complaints as needed,



and provides expert advice and support to the Chief Privacy Officer and Legal Counsel in sustaining an effective and sustainable privacy program.
In this role, your responsibilities will include: Provides expert advice to university leadership, faculties, and administrative units on the interpretation and application of privacy legislation, institutional policies, and best practices related to compliant collection, use, disclosure, retention, and safeguarding of personal information, including complex or precedent-setting matters escalated from within the Access to information and Privacy Office, to support informed, legally sound decision‑making and reduce institutional privacy risk.
Supervises the work of the Privacy Specialist, including assigning and reviewing files, providing day‑to‑day guidance and coaching on privacy matters, and ensuring escalation of complex or high‑risk files, to support the Specialist's development and maintain consistent quality and compliance across the Office's privacy work.
Supports University units that act as Health Information Custodians (HICs) and their agents by providing PHIPA‑compliance guidance, reviewing initiatives involving personal health information, to ensure the University's handling of personal health information meets statutory obligations under PHIPA.
Leads and conducts complex Privacy Impact Assessments (PIAs) and other privacy risk assessments for recent or significantly modified initiatives, systems, services,



or data‑sharing arrangements, including higher‑risk projects and those escalated from within the Office, such as initiatives involving AI tools and other emerging technologies. Identifies privacy risks, determining and recommending mitigation strategies aligned with risk‑based compliance approach, and providing final recommendations to support informed decision‑making.
Tracks, monitors, and reports on privacy risks and mitigation measures across the Office's PIA and risk assessment portfolio, identifying trends and systemic issues requiring escalation to the Chief Privacy Officer.
Leads the development, review, and maintenance of university privacy policies, standards, procedures, and guidance materials setting the framework within which other privacy team members contribute, to ensure the University's privacy framework remains current and aligned with legislative requirements and evolving best practices.
Reviews and provides final privacy advice on higher‑risk or complex contracts, agreements, and data‑sharing arrangements involving personal information, working collaboratively with IT, procurement, legal, members of the research community, and administrative stakeholders to ensure privacy risks are addressed before agreements are finalized and third‑party relationships are established.
Leads the management of complex high‑risk privacy incidents, complaints, and internal investigations, including those escalated from other members of the privacy team. Overseeing assessment, documentation, mitigation and response, to ensure incidents are resolved effectively, limiting harm to affected individuals and the University's liability.
Prepares correspondence, briefing materia

#J-18808-Ljbffr

📌 Lead Advisor, Privacy (Quebec City)
🏢 uOttawa
📍 Quebec City