Reporting to the Vice President College Services/CFO, the Privacy and Risk Officer provides strategic guidance, advisory services, and technical expertise to the college’s Executive and Leadership teams. Through a culture of collegiality and accountability, the Privacy and Risk Officer is responsible for ensuring that Selkirk College complies with all mandatory privacy laws and regulations, manages a comprehensive Enterprise Risk Management program, and oversees contractual and insurance agreements, and is the Designated Officer for Public Information Disclosure complaints at Selkirk College. This multi-faceted role involves a combination of strategic thinking and analytical skills to safeguard sensitive information, mitigate potential risks, and maintain the integrity of the organization’s operations.

Privacy and Planning

• Work with the President and VP-College Services to build a strategic and comprehensive privacy program ensuring that all privacy forms, policies, standards, and procedures are up to date.
• Defines, develops, maintains, and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of protected, paper and/or electronic, across all media types. Chair the Privacy Committee, ensuring privacy compliance.
• Collaborate with the Senior Leadership to ensure alignment between security and privacy compliance programs including policies, practices, investigations, and acts as a liaison to the information systems department maintaining governance for the privacy program.
• Investigate, report, and remediate privacy beaches, inappropriate access and disclosure of protected information.
• Perform or oversee initial and periodic information privacy risk assessment/analysis, mitigation, and remediation.
• Ensure the organization has and maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.
• Initiate, facilitate, and promote activities to foster information privacy awareness within the organization and related entities, delivering initial and ongoing privacy training to the workforce.
• Maintain current knowledge of applicable FIPPA and PIPEDA privacy laws.
• Ensure sound administrative policies and procedures are in place to safeguard assets and ensure that the work requirements of the college are discharged in a timely and efficient manner.
• Work with organization administration, legal counsel, and other related parties to represent the organization’s information privacy interests with external parties (3rd party, or local government bodies, goods, and service providers).
• In response to requests, provide human resources information about the college to appropriate external agencies, as permitted under privacy legislation and aligned with the college strategic principles.
• Act as the Designated Officer (DO) for responding to requests for advice, receiving disclosures and investigating disclosures of wrongdoing under the Public Interest Disclosure Act (PIDA). The DO is responsible for exercising the responsibilities assigned to them by the President under PIDA Policy and Procedures.

Risk Management

• Work with the Vice-President College Services, CFO and Executive Director, Finance & Risk to ensure the effective planning, organizing, coordinating, and management of a comprehensive Enterprise Risk Management program designed to protect the college from exposure to risk that could have adverse consequences to college operations, financial position, or reputation.
• Ensure a robust contract review process for the college to ensure minimization of risk.
• Oversee the insurance requirements, or self-assumption of risks, for a broad range of college needs.
• Assist the Vice-President to interpret laws, policies, and procedures to ensure the college risk management programs are in compliance.
• Build college-wide support and visibility for risk management and loss control programs and initiatives. Obtain stakeholder buy-in on program goals and objectives.

Contract Management

• Assist the VP College Services, CFO and Executive Director, Finance & Risk with leases, license to occupy and other ongoing agreements.
• Oversee the contract registry database and ensure that ongoing transactions are maintained, and contracts are updated in a timely manner.
• Work with the Procurement Department and Registrar’s Office to manage and track procurement and academic agreements and contracts.

Other Duties

• Performs other duties as assigned.

Skills, Knowledge, and Abilities

• Strong interpersonal skills, including the ability to clearly express views, ideas, and facts both orally and in writing, active listening, negotiation, mediation, and conflict resolution skills.
• Excellent teamwork, leadership, and time management skills.
• Excellent analytical and organizational skills.
• Demonstrated information literacy and computer skills.
• Knowledge of risk management principles and practices.
• Awareness of legal processes, contract law and procedures.
• Awareness of insurance underwriting principles and practices.
• Knowledge of security and loss prevention methods.
• Demonstrated ability to exercise independent judgment and initiative to assess problem situations and plan projects.
• A commitment to continuous learning as the foundation of a professional development planning process.
• A commitment to collaborative and consultative processes, and to communicating broadly with the college community.

Education and Experience

• A bachelor’s degree in a Business or a related discipline.
• Minimum of 3 years working in a relevant field. Post-secondary or related public sector environment would be considered an asset.
• Completion of an Information Access and/or Privacy Professional Certificate Program (i.e., CIPP/C, CIPT, CIPM, or CAPPA.) is considered an asset.

This is a regular, full-time position commencing approximately April 29, 2024. Salary and benefits are in accordance with the Administrative Staff and Benefit Program. Based on qualifications and experience, the compensation is in accordance with the Exempt Compensation Framework which is aligned with Selkirk’s compensation philosophy. As such, the position will be placed on Grid Level 10 between the minimum and control/mid-point ($85,711.00 – $114,281.00).