Privacy Program Manager Jobs in Toronto, ON (NOW HIRING)

The mission of Canada's Children's Hospital Foundations (CCHF)istofund the most urgent needs in children's healthcare by uniting hospitals, donors, and partners across Canada.Established in 2017, CCHF is a non-profit organization that raises funds for a national network of children's hospital foundations. As the largest single, non-government funder of child health in Canada, CCHF continues to receive generous support through donors within Children's Miracle Network as well as contributions fromadditionalcompanies and partners.

CCHF is looking to fill a vacancy on our team.

When you join CCHF, you become part of a collaborative culture rooted in our values: compassion, ambition, partnership, and integrity. These values guide how we work with our Member Foundations, help shape our national partnerships and fundraising campaigns, and, of course, enable how we work as a team.Your success will be guided by our Leadership Competencies of Values People & Culture, Strategic, Accountable for Results, Promotes Learning & Development, Fosters Collaboration & Diversity, Leads Change and Exemplifies Integrity & Respect.

At CCHF we are more than fundraisers. We are champions for the next generation-standing with families, donors,partnersand communities to form a trusted alliance advancing children's health and amplifying impact nationwide.

Bold in vision. National in scale. Local at heart.

Because the health of our children shapes the future of our country. And building that future starts here-with us.

POSITION OVERVIEW

Reporting to the Vice President, Finance, People & OperationstheSenior Manager,Data Privacyand Business Applicationsis an important member of the CCHF team,Theroleis responsible foroverseeing and coordinating

CCHF's privacy, data governance, and business continuity programs to safeguard the digital ecosystem of CCHF and its stakeholders (ie: information, devices, users, etc.).

The Sr ManagerData Privacy and Business Applicationspossesseswell-honed problem solving and decision-making skills,exhibitingagility,adaptabilityand effectively managing change. This role is a blend of strategy and tactics, influencing adoption, prioritizing results, andmaintaininga strong customer service orientation. Your reputation precedes you, as you are known for raising the barregardinginformation security,optimizingenabling tools, engagement, coaching, and execution.

The incumbent will develop and implement comprehensive privacy and data governance programsto protect the organization's assets, customers, employees, and information. This is highly relational role requiring collaboration with various departmentsas well as oversight of CCHF's network and cybersecurity providersto ensure that security measures align with regulatory requirements and business goals.

The incumbent is also responsible for partnering with business functions to enableBusiness Application Lifecycle Management activities oriented towardsleveragingCCHF's information and data assets to further the businessobjectives.

This incumbent manages the relationship with our primary Managed Service Provider (MSP) to ensure the stability of our cloud-first infrastructure, service level agreements are achieved as well ashigh user satisfaction service experience.

As the primary point of contact, the incumbent willbe responsible forgathering requirements from the departments and partnering with leadership to continuously evolve the application portfolio to enable the businessobjectives. This encompasses overseeing and optimizing the suite of applications that drive the business's core functions by ensuring that enterprise applications-which include ERP systems, CRM platform, and other specialized software-are effectively integrated and functioning smoothly to support business operations.

Thispositionentailsa combination of office and work from home environments, with employees transitioning to working 2-3 days per week at our Toronto office. Occasional travel to fundraising activities and events, meetings, conferences, and training opportunities within Canada and USA will berequired.Evening & weekend work may berequired.

The expected salary for this position is:$105,000 - $123,000*

*Note:based on factors such as education,experience,skills

As a CCHF Employee, you will:

• Act as a positive contributor to the CCHF vision, mission, values, and culture

• Work collaboratively with CCHF staff, Member Foundations, Children's Miracle Network Hospitals (CMNH), partners, suppliers, and other stakeholders to gain buy-in in an environment of competing priorities
• Act as a skilled problem solver that thrives in a fast-paced environment and manage multiple priorities and quickly respond to the needs of partners and/or stakeholders in well-thought out and workable solutions
  

KEY RESPONSIBILITIES

Leadership

• • Provide innovative, insights-based recommendations to advance the priorities of the business objectives
  • Serve as a role model for Values and Leadership Competencies
  • Provide support and advice to the Vice President, Finance, People & Operations (VP FPO) on areas of organizational development, resource allocation, risk assessment and management.
  • Foster a culture of security awareness throughout the organization.
  • Manage and maintain best-in-class internal controls and procedures to safeguard the assets of CCHF and ensure the integrity of organization data and reporting.
  • Provide regular reports to the executive team on security, status, risks, and initiatives.
  • Participate in cross functional teams to support high-quality services to Member Foundations and other stakeholders.
  • Provide information and support to Member Foundations related to areas of accountability.
  • Develop plans to educate all levels of the organization on security, privacy, policy, processes, guidelines, controls and ensure adherence to enhance operational excellence.
  • Design, develop, implement and maintain continuous improvement frameworks to enhance operations.
  • Develop relevant metrics, measures, and share information across the organization for continuous improvement of operations
  • Assist with the preparation of department budget.

Governance, Compliance and Business Continuity

• • Data Privacy and Protection: Work closely with the VP, FPO to proactively ensure compliance with data privacy laws and regulations, such as the Personal Information Protection and Electronic Documents Act (PIPEDA). Prepare the organization for impending changes and/or best practices.
    • Develop and implement policies for secure data handling, storage, and sharing.
    • Work closely with VP, FPO to conduct regular privacy impact assessments IPIA's) and audits.
  • Regulatory Compliance: Stay informed about changes in security and regulations and industry standards. Prepare the organization for impending changes and/or best practices.
    • Ensure the organization's security practices are in compliance with all relevant laws and regulations.
    • Prepare for and manage security audits and assessments.
  • Business Continuity and Disaster Recovery: Develop and maintain business continuity and disaster recovery plans in the context of evolving contingencies.
    • Conduct regular tests and drills to ensure preparedness.
    • Coordinate recovery efforts in the event of a security incident or disaster.
  • Incident Response and Management: In collaboration with VP, FPO, develop and maintain an incident response plan.
    • Work closely with the Senior Leadership Team (SLT) on the response to security incidents and breaches, including investigation and mitigation.
    • Support SLT in coordination with law enforcement and regulatory bodies, as necessary.
  • Training and Awareness: In collaboration with HR department, curate and maintain a training and awareness program focused on privacy and the protection of personal and sensitive data.
    

Business Applications Compliance and Optimization

• • Establish and maintain governance encompassing resource management, nurturing and system administration such as data security, user access, change tracking, review, audit, deployment control, and rollback.
  • Advise and support function leads who administer applications, to optimize and leverage their respective business applications.
  • Translate business requirements into technical solutions, demonstrating a deep understanding of business processes.
  • Deliver assigned projects, applying project management principles and skills.
  • Resolve user inquiries, applying analytical and problem-solving skills.
  • Partner with function leads to evaluate, select, and implement systems and procedures that support the business goals.
  • Ensure adherence to policies and procedures with all new and existing business applications.

Security

• • Strategic planning: Collaborate with VP FPO in developing and implementing the organization's overall security strategy.
  • Establish security goals, objectives, and key performance indicators (KPIs).
  • Conduct regular risk assessments and update security protocols accordingly.
  • Information security: Work with the MSP to ensure that cyber and network security measures are compliant with privacy regulations, protect the organization's digital assets, and mitigate cyber-attacks and security breaches.
  • Physical security: Manage the physical security of the organization's computing assets.
  • Develop and enforce policies for data and information access control, surveillance policies, and incident response procedures.
  • Coordinate technology security measures for organization events and travel.
  • Vendor and Third-Party security: Evaluate and manage security risks and privacy law compliance measures associated with third-party vendors and partners. Complete Data Protection Impact Assessments for new technology and new third-party data usage processes.
  • Develop and enforces data security requirements and privacy compliance for third-party contractors.
  • Conduct regular security assessments of third-party services and products.
  • Work closely with cyber insurance providers to establish and maintain sufficient coverage for the organization.

Vendor Service Deliveryand Experience

• MSP Oversight: Manage the Managed Service Provider (MSP) contract, ensuring they meet Service Level Agreements (SLAs) for helpdesk support and system uptime
• User Satisfaction:Collaborate with MSP tooptimizeand orchestrateservice experience culminating inhighsatisfactionscore(80%).
• Performance Reviews: Lead monthly and quarterly business reviews with vendors to address recurring issues.
• Collaborate with function leaders to select digital technologysuppliers andmanage the process of sourcing and securing technology vendors, including handling of proposals, contracts, and performance reviews.
• Escalation Point: Act as the internal point of contact for critical technical incidents that the vendor cannot resolve independently.
• FinOps: Manage the "Cloud Spend," optimizing licenses for platforms like Microsoft 365 to prevent waste / technical debt

Team Leadership, Monitoring and Management

• Manage and provide guidance and direction to the team to achieve targets and priorities, with a focus on shared values, collaboration,integrityand communication.
• Coach, encourage, inspire, and motivate team members to meet their individual potential.
• Ensure team membersestablishannual goals.Monitor and provide transparent performance feedback through the annual Performance Management processes and through regular informal meetings.
• Recruit and retain top talent to increasecapacity,performanceand business results.
• Identify opportunities for training, knowledge sharing, team learning, and professional development.

Other projects and duties as assigned.

QUALIFICATIONS

• Completion of bachelor's degree in Law, Business Administration, Information Technology, or a related field
• CIPP/C, CIPM, IGP or similar certification is required
• PMP and/or ITSM Certification is an asset
• 5-8 years' experience with oversight responsibility of data/information privacy or governance program.
• Minimum 3 years' experience in governance/management leadership position, encompassing planning, design, implementation, and successful administration of privacy, data governance or records management program.
• Vendor management experience an asset.
• Experience in records and data lifecycle management
• Experience and high-level familiarity with M365 suite of applications, with experience configuring and administering a data management platform MS Purview required
• Expertise working with CRM (Salesforce preferred)
• Experience with enterprise-grade storage and file sharing platform SharePoint required, (Box an asset)
• Experience with enterprise grade collaboration platform (MS Loop and MS Planner) an asset
• Knowledge of physical security and cyber security systems and data as they relate to regulatory and privacy requirements
• Strong understanding of security standards, regulations and best practices
• Experience developing governance policies, procedures and standards
• Demonstrated knowledge of privacy legislation, especially GDPR, Law 25, or CCPA
• Knowledge of IT governance frameworks (e.g.OC2, ISO 27001, NIST, HIPAA, PCI DSS, and/or COBIT)
• Leadership experience in strategic planning, solutions design, and program administration
• Highly analytical and structured approach with focus on understanding the driver for results
• Advanced planning and coordination skills to meet time sensitive/deadline-oriented deliverables
• Ability to manage multiple priorities in a dynamic environment.

Canada's Children's Hospital Foundations is committed to fair andequitableemployment in our recruitment and selection process. We welcome applicants including, but not limited to, persons with disabilities, racialized communities, all religions and ethnicities, Indigenous people, LGBTQ2S+ persons and all others who may contribute to the further diversification of our foundation community.

We thank all applicants for their interest, however only those who qualify for an inte...