Senior Data Privacy Advisor

Job Title: Senior Data Privacy Advisor

Company Overview:
Noetiq Edge is a strategic consulting firm based in Canada that provides insights and talent expertise to firms across multiple industries including Finance, Supply Chain, Defence, Retail, Healthcare, and High-Tech.

We establish trusted partnerships with organizations to ensure they have the strategy, information, technology, and talent required to succeed in a dynamic world.

Job Description:
Our financial services client is currently seeking a Senior Data Privacy Advisor for an initial 1 year part-time contract (opportunity to be full-time in the future).

As the successful candidate you will guide the modernization of data protection practices. This is a strategic advisory role to assess current practices, identify emerging risks, and recommend best-practice approaches to organizational leadership, technology, and legal teams.

A central focus of the role is helping the organization navigate data risk, including potential exposure created by CPPA, the CLOUD Act, and and other recent data protection legislation. The focus will be developing a forward-looking strategy for data sovereignty and cloud vendor risk as a Canadian private company operating in an increasingly complex international regulatory environment.

This position is available 100% remote. The successful candidate must be located in Canada. The part-time hours are negotiable depending on the successful candidates availability and hourly rate.

Key Responsibilities:

• Working with the Information and Data Management team to assess the organization's current data protection posture and advise senior leadership on a modernization roadmap aligned with evolving Canadian and international privacy expectations.
• Advise on the organization's exposure to the international data policies including the US CLOUD Act.
• Recommend data residency, data sovereignty, and architectural strategies (e.g., Canadian-only hosting options, encryption and key-management approaches, contractual safeguards) to mitigate cross-border legal exposure, in partnership with IT and Information Security teams
• Provide expert guidance on PIPEDA, provincial privacy legislation (e.g., Quebec's Law 25), and relevant international frameworks (GDPR, CCPA) as they apply to the organization's operations and vendor relationships.
• Evaluate third-party and cloud vendor contracts and data processing agreements, flagging privacy, sovereignty, and cross-border transfer risks for Legal/Procurement to action.
• Monitor and interpret emerging privacy legislation, regulatory guidance, and case law (Canadian and international) relevant to cross-border data flows, and translate implications into clear recommendations for leadership.
• Act as a subject-matter resource during privacy incidents, advising on regulatory notification obligations and risk implications, while incident response execution remains with operational teams

Required skills:

• 8+ years of experience in data privacy, regulatory compliance, or information governance, with demonstrated experience operating in an advisory capacity (consulting, legal counsel, or senior governance role)
• Strong working knowledge of PIPEDA, provincial privacy laws (Quebec Law 25, PIPA Alberta/BC), and international frameworks (GDPR, CCPA).
• Solid understanding of the U.S. CLOUD Act, conflict-of-laws issues in cross-border data access, and practical implications
• Demonstrated ability to translate complex legal and regulatory risk into clear, actionable guidance for executives, technologists, and business stakeholders who own delivery.
• Experience working within or advising financial services (or similar) industry.

Nice-to-have skills:

• Advanced degree (e.g., LLM, Master's in Information Governance, or related field) and/orp rofessional privacy certification (e.g., CIPP/C, CIPM, CIPT, or equivalent).
• Certification in cloud security or governance (e.g., CCSK or equivalent).
• Familiarity with cloud architecture, data residency models, and vendor risk concepts sufficient to advise credibly with technical and security teams (hands-on implementation not required).