Legal Director, Privacy & Data Protection, Canada

Restaurant Brands International IncToronto, ON, Canada

30+ days ago

Salary

CA$62,000.00–CA$76,000.00 yearly

Job description

About Restaurant Brands International :

Restaurant Brands International Inc. is one of the world's largest quick service restaurant companies with over $40 billion in annual system-wide sales and over 30,000 restaurants in more than 100 countries. RBI owns four of the world's most prominent and iconic quick service restaurant brands – TIM HORTONS®, BURGER KING®, POPEYES®, and FIREHOUSE SUBS®. These independently operated brands have been serving their respective guests, franchisees and communities for decades. Through its Restaurant Brands for Good framework, RBI is improving sustainable outcomes related to its food, the planet, and people and communities.

Our opportunity for you :

RBI is one of the world’s largest quick service restaurant companies with over 27,000 restaurants in more than 120 countries. RBI owns four of the world’s most prominent and iconic quick service restaurant brands – Tim Hortons®, Burger King®, Firehouse Subs®, and Popeyes®.

80% of Canadians visit a Tim Hortons restaurant at least once per month. Tim Horton’s has the #1 mobile app in food and drink category and #2 largest loyalty program in Canada. Tim Hortons also currently supports more than 300,000 children on teams in hockey, soccer, ringette, lacrosse, softball and baseball leagues in Canada and the United States. Our guests’ experience is becoming increasingly digital, so we’re creating innovative products to deliver better consumer experiences.

RBI’s Global Privacy Program continues to mature in response to enhanced regulatory and enforcement risks, increased expectations around data ethics from society and key stakeholders, and innovative and evolving business models. We’re quickly growing the team and are searching for a Legal Director, Privacy & Data Protection in our Toronto office. This role will report to the Global VP, Privacy Officer at RBI. It will be responsible for leading RBI’s Global Privacy Program in Canada, and for driving RBI’s handling of legal and compliance issues related to privacy, security, and data protection matters in the country.

The candidate who fills this role will be an instrumental legal advisor and business partner to the cross-functional teams at RBI. The candidate will also have deep experience in collaborating with data protection supervisory authorities and have established relationships with one or more of these authorities in Canada.

Join us and help build the next generation of digital experiences for Canada’s most-loved brand!

Primary responsibilities - What you’ll do :

Lead the development and implementation in Canada of RBI’s Global Privacy & Data Protection Program
Design, propose and implement privacy processes, protocols, and controls that are the foundation of a modern and proactive privacy function
Be the go-to person for all privacy matters in Canada and steer external counsel as needed
Oversee the legal and regulatory compliance for privacy, security, and data matters in Canada
Serve as the primary expert and resource on these matters for the teams on the ground.
Provide legal advice and day-to-day support to legal colleagues and business stakeholders on privacy, security, and data related matters.
Document, prioritize, and communicate clear privacy requirements for product initiatives and releases
Educate and advise the business team on new data, privacy, and ethical uses, and provide strategies to address privacy and data governance considerations
Evaluate the impact of privacy laws, regulatory guidance, and enforcement actions
Lead responses to regulatory inquiries and investigations, incident / breach response, and intensified data subject requests
Draft, negotiate, structure, and advise on a variety of complex, multifaceted agreements involving partnerships, technology transactions, and data protection-related matters
Ensure our commercial relationships comply with applicable law and our internal privacy, security, and compliance policies
Provide strategic legal and business advice to facilitate and develop long-term relationships with clients and partners

What you’ll bring : Experience

B. or JD and a member in good standing with a provincial or territorial law society

10 / 15 years of post-Bar admission experience, preferably a combination of law firm and in-house experience (experience advising tech and / or hospitality companies is preferred)

5 / 10 years of relevant privacy, data protection, and compliance experience

Sophisticated, in-depth knowledge of global data privacy laws, with a focus on data privacy laws in Canada, the Canadian provinces, the , and the EU.

Experience implementing privacy management programs

Broad understanding of changing priorities, trends, legislative and regulatory requirements and / or other internal and external emerging issues and their potential impacts on goals, priorities and activities within a privacy program and across the organization

Experience with incidents and data breaches

Experience with regulatory investigations

Strong background in technology transactions, commercial law, privacy, data protection

Skilled negotiator with deep transactional expertise

Experience working closely with clients and successfully managing client relationships

Demonstrated ability to issue spot and “connect the dots” across business units on data privacy, security, and compliance matters, and escalate accordingly

Skills

Comfortable working with a legal and business mindset simultaneously

Outstanding analytical and negotiation skills, with strong attention to detail

Sound business and legal judgement

Able to make smart decisions and balance risk, often in ambiguous situations and with imperfect information

Willing and eager to dive into new areas of law and unfamiliar issues

Solid project management skills

Able to manage own schedule, work efficiently, prioritize workflow, meet demanding deadlines, and manage multi-faceted projects in a fast-paced environment

Ability to understand key business issues while managing the day-to-day execution of key privacy program activities and supporting projects

Able to operate autonomously while contributing successfully to cross-functional teams

Excellent communication skills, with an ability to gain support and reach consensus from multiple stakeholders

Strong sense of ownership

Nice-to-haves

French / English bilingual capabilities

Privacy or cybersecurity credentials (CIPP / E, CIPP / US, ISACA…)

Business and work experience outside the legal context, including internationally