Associate Director, Privacy, Data Protection and Information Governance

About the role

EY Canada's Risk Management function manages risks related to regulation, data protection, client and engagement acceptance, conflicts and independence. Its privacy and data protection team is hiring an Associate Director, a data and information governance professional with knowledge of privacy and records and information management. The role helps the firm comply with Canadian privacy laws and records and information management standards, and involves direct support of the Privacy and Data Protection Leader and the team.

Key responsibilities

• Support and promote compliance with data protection laws, regulations and EY policies and processes.
• Provide effective, risk-appropriate advice to professionals.
• Measure and monitor the effectiveness of tools and processes, report regularly, gather stakeholder feedback and recommend improvements.
• Work with EY Global functions, other member firms and local stakeholders to implement global policies, processes and tools in Canada.
• Manage special projects as needed and support specialty practice areas in meeting their data requirements.
• Develop and deliver training to new hires and professional personnel, and run awareness campaigns on data protection and records and information management.

Required profile

• Minimum of five years of experience in data protection, data/information governance or records and information management.
• Experience supporting the implementation, monitoring or improvement of data governance, records management, privacy or compliance policies and processes.
• Project management experience or experience managing data governance, records management, privacy or compliance initiatives.
• Knowledge of, or experience in, a multidisciplinary professional services environment is an asset.

Required skills

• Comprehensive knowledge of records and information management practices, including classification systems, metadata standards, retention, preservation and protection.
• Knowledge of Canadian federal and provincial privacy laws and evolving privacy and data protection requirements.
• Knowledge of risk management and compliance principles, and of CASL, GDPR and California privacy requirements (assets).

What we offer

• Competitive compensation with a discretionary bonus program.
• Total Rewards package including medical, prescription drug and dental coverage, a defined contribution pension plan, vacation, statutory holidays and paid personal days.
• Coaching, learning opportunities and flexible ways to handle the role.