Privacy Analyst Status: Full Time Hours: Monday
- Friday, 35 hours/week Home Campus: Fennell (hybrid work arrangements available) Rate of Pay: Payband 10 ($88,983
- $111,230 per year) Vacancy Status: 1 vacancy available Posting Date: September 30th, 2026 Closing Date: October 6th, 2026 at 7:00 pm EST We believe the rich diversity among our students and the communities we serve should be reflected within our workforce. As educators, we believe it is important to act and show leadership in advancing the principles of reconciliation, equity, diversity, and inclusion in our community. The Privacy Analyst supports the institution's Privacy Management Program (PMP) by conducting privacy impact assessments (PIAs), reviewing technology and vendor solutions for privacy and data protection risk, and supporting compliance with the Freedom of Information and Protection of Privacy Act (FIPPA) and related provincial privacy legislation. Working under the direction of the Privacy and Records Management Officer, the Privacy Analyst plays a hands‑on role in operationalizing institutional privacy policy, assessing new systems and third‑party agreements, supporting breach response, and helping build a culture of privacy‑by‑design across academic and administrative units. The incumbent is able to interpret complex privacy regulations to communicate them in clear language to a cross‑section of College stakeholders, while maintaining positive working relationships and adhering to imposed deadlines. The Privacy Analyst role is well suited to a detail‑oriented privacy skilled with formal IAPP certification who is comfortable translating legislative and regulatory requirements into practical, defensible assessments and recommendations. This position can primarily work remotely, however,



occasional travel to campus for in‑person work may be required. What you’ll be doing:
- Conduct Privacy Impact Assessments (PIAs) for new and existing systems, applications, vendor platforms, and institutional initiatives involving the collection, use, or disclosure of personal information.
- Perform privacy and data flow reviews for third‑party technology platforms (e.g., learning management systems, survey and assessment tools, AI‑enabled applications, cloud services), including data flow mapping, collection authority analysis under FIPPA, and identification of secondary‑use or re‑identification risk.
- Evaluate vendor contracts, data processing and sharing agreements, and SOC 2/security attestation documentation for privacy‑relevant terms (sub‑processor disclosure, breach notification obligations, data residency, no‑secondary‑use clauses).
- Assess emerging technologies, including AI and machine learning tools, against applicable guidance (e.g., IPC guidance, Ontario's Trustworthy AI Framework) and institutional privacy‑by‑design principles.
- Maintain a PIA and vendor assessment tracking log, including risk ratings, outstanding action items, and sign‑off status. Policy, Governance & Advisory Support
- Support development, maintenance, and interpretation of privacy policies, procedures, and templates under the institution's Privacy Management Program.
- Provide day‑to‑day privacy advisory support to faculty and staff on FIPPA collection,



use, disclosure, retention, and disposal requirements.
- Assist in preparing briefing materials, risk summaries, and recommendations for the Privacy Officer and Senior Leadership Team.
- Support role‑based data governance activities (e.g., Data Owner/Steward/Custodian mapping) and delegation frameworks for PIA sign‑off. Breach & Incident Support
- Assist in the intake, triage, and investigation of suspected privacy breaches or information incidents, including RROSH (Real Risk of Significant Harm) threshold analysis in accordance with Bill 194 amendments to FIPPA.
- Support completion of breach investigation reports, containment recommendations, and notification requirements to affected individuals and the Information and Privacy Commissioner of Ontario (IPC), as required.
- Contribute to post‑incident reviews and recommendations for corrective action. Training, Awareness & Reporting
- Develop and/or deliver privacy training and awareness materials for staff, faculty, and vendors.
- Track and report on institutional privacy metrics (PIA completion rates, breach volumes, vendor review status) for governance and audit purposes.
- Support responses to Freedom of Information (FOI) requests as needed, in coordination with Records/FOI staff. Other duties as assigned. What you’ll bring to the role:
- 3-year diploma/degree in relevant fields such as Information Management, Privacy, Legal Studies, Data Science, or related field, or equivalent combination of education and experience.
- 5 years of experience working in privacy, compliance, information governance or related roles, including reviewing and managing privacy case files, applying privacy legislation, and preparing clear summaries or rec

📌 Privacy Analyst (Canada)
🏢 MOHAWK COLLEGE OF APPLIED ARTS & TECHNOLOGY
📍 Canada