THE OPPORTUNITY:

The Canadian Resident Matching Service (CaRMS), located in downtown Ottawa, is seeking a talented, strategic, and detail-oriented Privacy and Compliance Officer to join our team. Reporting to the Director of Client Experience and Service Excellence, this role is pivotal in overseeing compliance and privacy activities across the organization, serving as the organization’s Chief Privacy Officer.
This is a full-time permanent role and bilingual proficiency in English and French is a must. The role is a hybrid position, and the individual must be comfortable working from the office at least once a week. Occasional overtime may be required to meet critical deadlines.

QUALIFICATIONS:

• University degree in related field.
• Certified Information Privacy Professional (CIPP/C) designation is preferred.
• 5+ years’ experience in legal, compliance, contract management, and privacy experience.
• A minimum of 2 years of related work experience in a healthcare setting is preferred.
• Demonstrated expertise in applying privacy legislation.

• Manage and centralize corporate policies related to match processes, compliance, and privacy.
• Maintain the corporate privacy plan, conduct privacy impact assessments, and ensure compliance while mitigating risks.
• Manages the Violations Review process including investigations and communications.
• Support the Board Violations Review Committee by providing documentation and strategic recommendations to the management.
• Responsible for documentation of corporate standard operating procedures, processes, and data/IT security rules related to match processes.
• Handle compliance requests, draft responses, and prepare reports on operational inquiries.
• Manage and update corporate contracts to ensure ongoing compliance.
• Conduct match-related audits, including compassion requests, and draft responses to audit requests.
• Provide administrative support for legal matters and liaise with external legal counsel.
• Engage with external privacy committees and maintain the corporate risk management framework.
• Assist in updating compliance policies to reflect regulatory changes and best practices.
• Initiate, facilitate and promote activities to foster privacy awareness corporate privacy training for all staff is managed and up to date.