Data Privacy and Compliance Analyst, Data Privacy and Compliance Office

at  University of Winnipeg

The Data Privacy and Compliance Office is responsible for developing and operating a strategic data privacy/compliance program at the University of Winnipeg that coordinates and implements multiple functions crucial to the overall control of the University’s data, including privacy, access to information, and data/records management.
Reporting to the Executive Director, Data Privacy and Compliance, the Data Privacy and Compliance Analyst is a full-time continuing position that plays a central role in the delivery and maintenance of the University of Winnipeg’s data privacy/compliance program.

QUALIFICATIONS:

• Graduate degree in a relevant area preferred; undergraduate degree required.
• Designation or certification from a relevant professional association (e.g., IAPP, ARMA, PACC) an asset.
• Minimum 3 years of related experience in data privacy, access to information, or data/records management, preferably in a post-secondary or government environment.
• Experience interpreting and applying legislative requirements.
• Experience delivering training and preparing reports, briefing notes, and similar correspondence to internal and external stakeholders.
• Experience interpreting, applying, and enforcing policies.
• Experience working independently and taking initiative.
• Knowledge of the goals, policies, and resources of the University of Winnipeg.
• Strong oral and written communication skills, including public speaking.
• Demonstrated ability to communicate complex privacy and data/records issues to broad audiences.
• Strong proficiency using Microsoft Office and 365.
• Proficiency with data/records or privacy compliance software (e.g., Purview, OneTrust, TrustArc) an asset.
• Knowledge of provincial, federal, and international legislation and best practice relating to data privacy, access to information, and data/records management.
• Ability to prioritize and manage multiple tasks simultaneously.
• Strong interpersonal skills, including demonstrated ability to establish and maintain collaborative relationships.
• Demonstrated ability to interact effectively with program managers and leadership at all levels.
• Strong analytical and problem-solving skills.
• Ability to maintain a high level of confidentiality.

• Analyzes the University’s program areas and operations to identify current activities and practices.
• Generates inventories that capture personal data processing across the University.
• Assists in the design and implementation of data/records classification systems and retention schedules pursuant to the University Records Policy.
• Updates data/records classification systems, retention schedules, and inventories based on changes to operations or legislative requirements.
• Generates records of processing activities to demonstrate how a data subject’s personal data is processed.
• Assists with the completion of data privacy/compliance impact assessments.
• Collaborates with personnel from other University offices in the operation of University-wide data governance initiatives.
• Performs research and analysis to identify new projects.
• Provides input and assistance in drafting protocols, guidelines, policies, and memos.
• Receives and coordinates access to information requests made under The Freedom of Information and Protection of Privacy Act and The Personal Health Information Act.
• Prepares reports and other documents in writing for the Government of Manitoba and the Office of the Manitoba Ombudsman regarding access to information and privacy matters.
• Responds to inquiries from faculty, staff, students, and the public concerning data privacy, data/records management, and access to information.
• Delivers high-quality training and education to the University community.
• Keeps up-to-date on relevant law and compliance requirements.