Privacy Compliance Specialist

Title: Privacy Compliance Specialist

Department: Legal

Location: 6300 Steeles Ave. West, Woodbridge

Work Arrangement: On-site

Total Compensation Potential: $65,000 - $90,000

Position Summary:

The Privacy Specialist supports the day-to-day operations of 407 ETR’s Privacy Office by managing privacy compliance activities, responding to privacy-related matters, and helping maintain the organization’s Privacy Program. Working closely with the Senior Legal Counsel & Privacy Officer, this role partners with stakeholders across the business to support privacy governance, risk management, policy development, training, incident response, and regulatory compliance, helping ensure personal information is handled responsibly and in accordance with applicable privacy laws and company standards.

Duties and Responsibilities:

• Be a key member and representative of 407 ETR’s Privacy Office, upholding all aspects of 407 ETR’s Privacy Mission Statement in carrying out all responsibilities.
• Help manage 407 ETR’s Privacy Program which includes:Administering/maintaining the Privacy Governance, Risk and Compliance (GRC) process, including working directly with data stakeholders to execute the Privacy GRCPrivacy impact and compliance assessmentsUpdating privacy policies, procedures and terms, including the Privacy Office intranet Training and awareness activities, including keeping updated on data protection, cybersecurity, and AI laws and best practicesRisk identification, logging and remediation activitiesInternal and external records management, retention, and destruction support
• Support responses to FIPPA requests as it relates to the organization
• Support privacy, data governance and AI -related activities or research
• Support privacy and information security incident responses, including being involved in incident response planning and implementation.
• Work with key stakeholder groups to address customer complaints and inquiries, including opt-out and personal data access requests.
• Other related duties to meet ongoing needs of the Privacy Office and the Legal Department.

Qualifications:

• 3-5 years in a privacy compliance or program management function.
• Degree, diploma and/or certification in privacy strongly preferred (e.g., CIPP/C, CIPPM, AIGP).
• Must have good working knowledge of federal and provincial privacy laws in Canada.
• Knowledge of European and US privacy laws an asset.
• Post-secondary education in legal studies or equivalent an asset.
• Proficient with Microsoft 365, ServiceNow, and SharePoint.
• Self-motivated, strong communicator with a good sense of judgment on sensitive issues.
• Able to handle daily matters with the utmost confidentiality.
• Well-developed organization, prioritization and time management skills.
• Strong attention to detail and commitment to accuracy.
• Strong service-oriented mindset with ability to deal in a professional manner.
• Ability to work well under pressure to ensure critical deadlines are met.

We are actively seeking to fill this role as it is a current vacancy.

About 407 ETR

Highway 407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east.

407 International Inc. is the sole shareholder of 407 ETR and is owned by:

• Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%)

• Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%)

• Public Sector Pension Investment Board (PSP Investments) (7.51%)

Learn more at

Note: