Privacy and Data Manager, NCIME (term position)

Job Title: Privacy and Data Manager, NCIME

Location: Remote – Open to anywhere in Canada.

Reports To: CEO

Starting Salary Range: $86,500 - $91,500

Job Summary:

The Privacy and Data Manager plays a crucial role in our organization, ensuring enterprise-wide regulatory compliance and safeguarding sensitive information. Your work will be instrumental in maintaining data privacy standards and operational oversight of NCIME’s data processes. The Data Privacy Manager ensures compliance with relevant Canadian privacy laws and policies and is aligned with the NCIME Indigenous Data Sovereignty Statement and Data Agreements. As the Data Privacy Manager, you will report to the CEO. Duties and responsibilities will be directed by the Academic Advisory Council and collaborated with the Executive Director Academic.

The Privacy and Data Manager is experienced and trained in the Information Technology industry, developing, and implementing data privacy strategies that safeguard sensitive information from unauthorized access, use, or disclosure. You will comprehensively understand data privacy laws, compliance frameworks, and security protocols, specializing in First Nations, Inuit and Métis data protocols. As the Data Privacy Manager, you will monitor data systems and processes to ensure they are secure and compliant with privacy regulations and Indigenous data sovereignty. You will conduct risk assessments, identify potential threats to data privacy, and develop contingency plans to mitigate them. You will perform data mapping and classification exercises, oversee data retention and destruction processes, and ensure data handling follows the organization's policies. More importantly, you will be responsible for ensuring that data privacy is not just a consideration but a priority throughout the organization. You will ensure that the entire organization processes the Indigenous data of their collaborators, employees, and partners under company policies and regulatory compliance requirements.

Role Responsibilities:

• Ensures all business and data management processes reflect privacy requirements and comply with laws, regulations, and Indigenous data sovereignty.
• Manage new and existing data agreements between NCIME and its partners and collaborators.
• Manage data subject access requests, including responding to inquiries and facilitating data deletion requests.
• Interfacing with data subjects to inform them of their rights, how their data is being used, and what processes the company has put in place to protect their data.
• Leads data research and analysis as directed by the Academic Advisory Council and, through collaboration with the Executive Director Academic,
• Develop and implement policies and procedures to safeguard the privacy of Indigenous data.
• Participate in data privacy audits, assessments, and certifications to ensure continuous improvement and compliance.
• Conduct privacy impact assessments, monitor and investigate potential data breaches to identify potential risks and recommend mitigation strategies.
• Maintain oversight of the Indigenous Database to ensure it is accurate, complete, and current.
• Maintaining records of all data processing activities conducted by the company, including all processing activities.
• Collaborate with third-party vendors and service providers to ensure they comply with contractual obligations related to data privacy.
• Prepare communications for privacy-related events or consumer, Board, government, or media inquiries.
• Collaborate with cross-functional teams, such as legal, Academic, IT, and security, to ensure alignment on data privacy initiatives.
• Train and educate employees, the Academic Advisory Council, the Partnership Council, the Board of Directors, and the Elders and Knowledge Keepers Council on data privacy practices and raise awareness within the organization.
• Plans and implements privacy training programs and communications. Manages compliance monitoring, auditing, and remediation.
• Willing to travel occasionally and work flexible hours to meet deadlines, as required; and
• Other duties as assigned.

What you’ll need to be successful in the role (essential qualifications):·

• Bachelor’s degree in a related field such as Business Administration, Law, Managing Information Systems, Social Sciences (Indigenous Studies concentration) or a related field with professional qualifications such as Privacy Management or certifications such as PACC/CIPP.
• Minimum of five years of experience in data privacy development and management, demonstrating a comprehensive understanding of the data life cycle.
• Practical experience in survey and statistical methodology (descriptive and inferential statistics, survey designs).
• Experience overseeing the design, development, and support of comprehensive data solutions that are secure, scalable, and reliable.
• Proven ability to build and maintain collaborative relationships with internal and external stakeholders.
• Comprehensive expertise in data privacy, security standards, and data governance principles, including the regulatory frameworks governing the protection of sensitive personal data.
• Ability to work collaboratively and lead within a team environment and independently with minimal supervision.
• Excellent communication skills, both written and verbal, with the capability to present data insights to non-technical stakeholders effectively.
• A commitment to continuous learning and staying updated with the latest technologies and methodologies in data analytics.
• Proficiency in using Microsoft Management Studio for database management and analysis.
• Analytical mindset with the ability to analyze complex data sets and derive actionable insights.
• Strategic thinker who can align operational initiatives with organizational goals and objectives.
• Positive attitude and strong work ethic.
• Flexible and capable of multi-tasking with several competing demands.
• Effective time management skills.
• Highly motivated, positive attitude and the ability to work independently.
• Skilled problem solver with a ‘full stack’ mentality.

Nice to have:

• Bilingual in English and an Indigenous language or French.

Core competencies of all NCIME team members (essential):

• Integrity: The NCIME will operate with the integrity of our ancestors in all aspects of our work and relationships, and with the best interest and support for Indigenous medical students and residents.
• Accountability: The NCIME will be transparent in all our work, relationships, and reporting. NCIME acknowledges the responsibility we carry towards education for culturally safe health care delivery for First Nations, Métis, and Inuit Peoples.
• Leadership: Leadership within NCIME is understood as the acknowledgement and support of the Indigenous leaders in medical education that form the Executive Committee as the rightful leadership and decision-makers. The leadership of the NCIME respects the guidance provided by the Elders and Knowledge Keepers Circle.
• Collaboration: The NCIME, through its purposeful design, recognizes and respects the importance of collaboration among and between Indigenous and non-Indigenous leadership and organizations in medical education. These collaborations are unique and pivotal in fulfilling our mandate. The collaboration includes both partners and external stakeholders from diverse communities, organizations, associations, and Canadian medical schools.

Working Environment:

While fulfilling job responsibilities, this role requires flexibility to work in different environments, including a remote home office setup, occasional travel, and participation in in-person meetings. Due to these demands, the employee will typically engage in the following activities:

• Extended periods of sitting, often at a computer workstation.
• Flexibility in work hours, including the potential for occasional overtime, to meet project deadlines, especially when coordinating with different time zones or during travel.

Accessible Participation:

Preference will be given to self-identified Indigenous applicants with demonstrated connections and commitment to advancing Indigenous health or Indigenous medical education. Non-Indigenous applicants who possess the requisite experience and skills and have prior experience working with Indigenous communities, organizations and individuals are also encouraged to apply.

The NCIME is committed to the principles of equity, diversity, inclusion and belongingness in our operations and throughout our work environments and seek to employ individuals who share a commitment to promote and practice these principles through continuous training, modelling inclusive behaviours, and proactively managing biases.

Applications will be accepted until the position is filled; however, round 1 interviews will begin the week of October 14, 2024.

We thank all applicants for their interest. However, only those selected for further consideration will be contacted.