CHIEF PRIVACY OFFICER

at  Manitoba Hydro

QUALIFICATIONS:

• A university degree (preferably in law or business) with at least 8 years of experience, of which two years includes privacy
  related experience.

OR

• A college diploma in a business related discipline with at least 10 years of experience, of which two years includes privacy

related experience.

• Experience in overseeing, designing, creating, implementing, and/or operating an enterprise-wide program.
• In-depth knowledge and experience with relevant legislation and regulations.
• Experience in incident handling, conducting administrative investigations, developing and implementing interim and post hoc

remedial and preventive measures.

• Industry certification such as Certified Information Privacy Professional/Canada (CIPP/C), the Certified Information Privacy

Manager (CIPM), or the Canadian Institute of Access and Privacy Professionals (CIAPP), designation considered an asset.

• Demonstrated ability to act independently and provide leadership in the oversight of corporate risks, design, monitor and

evaluate controls and assist in developing creative business solutions.

• A high degree of integrity and moral obligation and the ability to handle confidential and private information with discretion,

and respect and strictly adhere to the applicable professional standards and Codes of Conduct.

• Flexibility to adapt to a fast-changing environment and to adapt one’s own work schedule related to multiple assignments,

balance competing priorities.

• Advanced understanding of risk management analysis and techniques.

requirements and actions, investigations and related matters.

• Work with senior management to establish governance for the Program and serve in a leadership role and be accountable fo

with legal requirements.

• Utilize risk management to identify and manage related risks and oversee risk assessments, analysis, and management.
• Provide regular reporting on the Program to the General Counsel & Corporate Secretary, senior management, and othe

• Responsible for the development, implementation, operation, management, and continuous improvement of an enterprise
  privacy program to enable consistent and effective practices at Manitoba Hydro (the “Program"). The Program should consist
  of policies, procedures, safeguards and controls, training, investigations and other means to ensure compliance by Manitoba
  Hydro with applicable legal standards and requirements. The Program shall also include management of and response to
  access requests for personal information in accordance with applicable legislation and regulations such as The Freedom of

Information and Protection of Privacy Act (C.C.S.M. c. F175) and The Personal Health Information Act (C.C.S.M. c. P33.5).

• Act as the Access and Privacy Officer for the corporation for purposes of The Freedom of Information and Protection of

Privacy Act (C.C.S.M. c. F175) and The Access and Privacy Regulation 64/98.

• Act as main liaison with relevant authorities having jurisdiction, such as the Manitoba Ombudsman Office and The Information

and Privacy Policy Secretariat, and collaborate with authorities, peers, and experts, on matters such as best practices, legal

requirements and actions, investigations and related matters.

• Work with senior management to establish governance for the Program and serve in a leadership role and be accountable for

Program compliance. Collaborate with the Chief Information Officer and other stakeholders to achieve and maintain

compliance.

• Own, administer, and act as a primary corporate resource in the interpretation and application of Manitoba Hydro’s privacy

policy, including development, implementation, and maintenance of associated documentation (such as consents,
authorizations, records of events), processes, safeguards, and controls, monitor compliance and provide input into related

corporate policies, documentation, processes, safeguards, and controls.

• Establish a process to track, investigate and respond to allegations of incidents and breaches. Investigate and track incidents

and breaches and advise on appropriate notification of stakeholders, authorities, and impacted or harmed individuals, in
accordance with legal and regulatory requirements. Develop and implement, in consultation with subject matter expert and
line areas, remedial measures to minimize harm to Manitoba Hydro, remedy gaps and identify areas of high risk, and
preventive measures to minimize risk of recurrence. Maintain, track, and share records of violation and actions in compliance

with legal requirements.

• Utilize risk management to identify and manage related risks and oversee risk assessments, analysis, and management.
• Provide regular reporting on the Program to the General Counsel & Corporate Secretary, senior management, and other

stakeholders.

• Develop systematic approaches to address, manage, and mitigate third party compliance vulnerabilities and risks respecting

privacy-related matters.