Information Privacy Specialist

Centennial College recognizes and affirms Diversity, Equity and Inclusion and Indigenous ways of knowing as central to the vibrancy and uniqueness of its learning and working academic mission. We strongly encourage applications from members of Indigenous communities and all equity-deserving groups including Women, Racialized, Persons with Disabilities, and LGBTQ+ communities.

We also recognize that Centennial is situated on the Treaty Lands of the Mississaugas of the Credit First Nation and pay tribute to their legacy as well as that of all First Peoples that have been and remain present here in Toronto. We recognize that First Peoples come from sovereign Nations and that part of understanding our responsibilities of residing on this territory are understanding the true history, circumstances and legacy of the Treaties signed here (such as the Toronto Purchase, Robinson-Huron Treaty and Williams Treaties) and including pre-contact Treaties and Agreements between sovereign Nations and that all peoples in this area are therefore Treaty people with obligations and responsibilities to all our relations.

Position Summary

Centennial College is hiring for an Information Privacy Specialist to support the ongoing development and oversight of the Centennial Privacy practice. Reporting to the Associate Director of Cybersecurity and Privacy Operations and working closely with internal and external stakeholders, including Legal Counsel and Government bodies, the Information Privacy Specialist will manage and oversee the internal Freedom of Information (FOI) request process, conduct Privacy Impact Assessments, and support privacy breach management under the privacy practice.

The Information Privacy Specialist will advance the framework for an enterprise information management practice which will enhance business processes, information sharing, planning and decision making across Centennial College. This includes developing, implementing, and promoting plans, systems, and policies/procedures for information and records retention, storage, and disposal and ensuring a consistent, compliant and sustainable approach to protecting information and records assets in all forms (electronic and non-electronic).

Responsibilities

• Acts as a privacy expert and primary point of contact, providing advice and guidance on privacy and access to Information inquiries
• Provides interpretation in relation to the Freedom of Information and Protection of Privacy Act (FIPPA), the Enhancing Digital Security and Trust Act (EDSTA), and other applicable privacy legislation
• Identifies improvements to current processes through the implementation of privacy practices, guidelines, and protocols
• Manages Centennial College’s full privacy portfolio including, freedom of information, access to information, privacy breach management, privacy impact assessments, and contract review, including statutory timelines, the duty to assist, fee estimates, extensions, and staged access plans
• Reviews possible impacts associated with new solutions and system changes, including their potential implications on legal compliance and accreditation commitments, and completes written Privacy Impact Assessments before collecting personal information or significantly changing its use or disclosure
• Proactively monitors and informs senior leadership of legislative, regulatory, and best practice developments and trends which may impact Centennial College
• Conducts regular reviews and assessments related to privacy and records and information management policies, programs and operations, identifying opportunities and integrating best practices and continuous process improvements to systems, processes, and controls
• Responsible for end-to-end privacy breach management, including assessing the real risk of significant harm, required notifications and reporting to the Information and Privacy Commissioner of Ontario, breach records and annual statistics, and consultation with legal and other governing bodies
• Leads the drafting and implementation of regulatory documents related to records management, including an enterprise retention schedule
• Assesses and documents the organization, classification, and storage of data
• Ensures the appropriate disposal, destruction, or long-term preservation of information assets
• Reports compliance with policies related to the information lifecycle to corporate services
• Consults on technology solutions for email archiving, e-discovery, legal holds, and records management software
• Further develops and expands Centennial College’s electronic records and information management program, including the procurement, implementation, and support of Electronic Records, Information Management, and Content Management Solutions
• Collaborates with Learning & Development on appropriate workshops and training modules related to Privacy, Records, and Information Management

Qualifications/Experience

• Master’s degree in Records Management, Library and Information Science, Knowledge Management, or a relevant field, or equivalent combination of education and experience
• Formal education or training in the area of privacy and access programs
• Paralegal education and certification is an asset
• Minimum 7 years of related work experience in information privacy and electronic records management, preferably in a post-secondary or Broader Public Sector setting
• Demonstrated experience with implementing records management solutions that support moving towards a sustainable, paperless environment
• Demonstrated experience researching, developing, analyzing, and applying classification schedules to a variety of record formats
• Demonstrated understanding of project management principles and the prioritization of projects
• Demonstrated understanding of records, information management, and privacy principles, as well as a thorough ability to read and interpret legislation and legislative requirements
• Broad knowledge and understanding of Canadian and Ontario information legislation and of current issues in information policy (e.g. FIPPA, EDSTA, PHIPA, PIPEDA, etc.) as well as a broader understanding of privacy legislation governing other countries
• Broad knowledge of current trends in, records and information management, privacy and access, email management, digitization, electronic documentation, and content management / content services
• IAPP, CIPM, CRM, CIPP, PMP or related professional certification is considered an asset
• Ability to apply Canadian Standards Association (CSA) Privacy Principles and Information Lifecycle concepts to organizational practices

Apply online: www.centennialcollege.ca/careers

Proof of credentials or equivalencies from accredited regional or federal post secondary institutions and/or their foreign equivalents will be required at the time of job offer.

When applying, your cover letter and résumé must include examples that reflect all of the requested skills and qualifications and must be submitted online by October 13, 2026 at 11:59 PM EST. Please quote Job ID J0926-1004. Misrepresentation of applicant information will be grounds for your exclusion from the competition or for dismissal should you subsequently be hired for the position. We wish to thank all applicants for their interest and advise that only those selected for an interview will be contacted.

We are committed to providing persons with disabilities equal opportunities regarding all employment activities, including access to jobs and accommodations during employment as required, in accordance with the Ontario Human Rights Code (OHRC) and the Accessibility for Ontarians with Disabilities Act (AODA).