Specialist, Privacy

About CMHC

The work you do and the work we do together matters. We come to work every day with a common purpose: to contribute to a well-functioning housing system.

At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements. We thrive on collaboration, connecting across CMHC and involving the right people to get our work done. We have flexibility, in how, when, and where we work, within the boundaries of the business needs and the nature of your role. Our leadership style is guided by trust, where our leaders favour an adaptive approach based on the needs of their teams.

Join us and be part of a team that's committed to making a real difference and be part of something meaningful.

What’s in it for you

We’ve got the purpose, the people and the perks you need for a fulfilling career. Here’s the comprehensive and generous benefits you get when you’re a permanent employee:

• Annual paid vacation.
• Annual individual performance incentive.
• Defined benefit pension plan.
• Comprehensive group insurance plan to support your well-being from day one.
• Support towards your personal and professional growth with training, mentorship and more. 
• An inclusive workplace culture and environment.

About the role

Join the Office of the Chief Risk Officer Team, where we enable each employee to embrace strategic risks within established limits. Your strong knowledge of privacy will ensure compliance with established policies, procedures, frameworks and authorities to provide management with confidence in the operations of the business.  You will also actively participate in the maintenance and implementation of the Privacy Program in accordance with the Privacy Act and related directives from the Treasury Board of Canada Secretariat and Office of the Privacy Commissioner of Canada. You will apply privacy risk and control concepts to scenarios encountered and identify any potential issues. You will communicate identified issues and risks to senior management to ensure any potential concerns are addressed in a timely and effective manner. You will also direct, provide guidance and establish performance measures to team members and/or consultants assigned to the assignment as needed, and supervise and review their work to ensure quality of the work activities performed.

What you’ll do:

• Establish effective privacy practices and ensure that these practices are to be followed for activities related to the creation, collection, retention, accuracy, use, disclosure or disposition of personal information under the control of CMHC and its third-parties, including the personal information of CMHC employees.
• Promote an effective privacy risk management   culture by ensuring appropriate risk identification, control effectiveness and remediation actions; lead privacy awareness through training and change management efforts
• Support the continued maturation of privacy protocols, policies and procedures, and develop plans, including, as applicable, objectives, risk assessment, criteria and monitoring/testing approaches/programs for the conduct of the assignment.
• Support the execution of ongoing monitoring, testing, evaluating and reporting on key processes, controls and policy/program requirements, framework requirements, assessing rigour and consistency in the application of policies, procedures and controls. Conduct thorough privacy impact assessments (PIAs) and other privacy-by-design assessments, lead the investigations of privacy incidents, evaluate areas of vulnerability and provide directive leadership for the implementation of corrective actions for their resolution.
• Recommend and assist in the implementation of key performance and/or risk indicators and/or outcome targets to improve business effectiveness and efficiency.
• Discuss/validate findings and facts with CMHC personnel and appropriate level of management throughout the assignment and prepare written communications on results and recommendations for improvement and participate in debriefs with management.
• Analyze data sets and information to provide management with quantitative and qualitative information for decision making.
• Provide guidance and/or direction to analysts and staff regarding quality control and risk management improvements to enhance business operations.

What you should have:

• An undergraduate degree in a related field such as business, finance, law or economics.
• A minimum of 5 years experience in Canadian privacy (can be a combination of public and private sector).
• Demonstrated knowledge of Canadian privacy regulations (such as Privacy Act / PIPEDA) and experience in applying these concepts, practices and procedures in a variety of situations.
• Experience conducting privacy impact assessments, problem solving, stakeholder management  , developing recommendations for risk mitigation, assigning responsibility for risk mitigation tasks and activities, and monitoring to completion.
• Experience developing and/or leading privacy program and operational activities including, for example, privacy breach management, training and awareness, and privacy risk management.
• Excellent interpersonal skills (tact, judgment, diplomacy, professionalism, and political sensitivity).
• Strong interpersonal and communication abilities, encompassing high quality reporting and presentation skills, as well as proven project management capabilities.   
• The ability to establish and maintain effective working relationships. The ability to research issues, analyze problems, synthesize information and make recommendations.

It would be great if you also had:

• Demonstrated extensive experience with the Privacy Act and related directives from TBS / OPC.
• Recognized privacy designation (Certified Information Privacy Professional (CIPP/C) or other relevant privacy designation).
• A demonstrated audit or risk oversight experience.

Posting closing date:   Note, the competition will remain active until filled.

Our commitment to diversity, equity, and inclusion 

We’re committed to employment equity and encourage women, Indigenous Peoples, persons with disabilities, veterans and persons of all races, ethnicities, religions, abilities, sexual orientations, and gender identities and expressions to apply. We also welcome applications from non-Canadians who are eligible to work in Canada.

CMHC is an inclusive workplace where diversity of thought – and of people – are recognized, valued, and considered essential to achieving our mission.

Learn more about our commitment to diversity and inclusion 

What happens after you apply 

We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process.  If you are selected for an interview or testing, please advise us if you require an accommodation.

If you applied before and you were not successful don’t worry – we're always posting new positions, so don’t hesitate to give it another shot. We’re excited to see what you bring to the table this time around!