Senior Information and Privacy Advisor

Competition 1957

This position is excluded from the bargaining unit.

In accordance with the Handbook of Employment for Management and Professional Staff (Excluded), this position has a comprehensive benefits package and an annual salary which will be commensurate with qualifications.

Location - This role is hybrid with a mix of remote and in-person. Work primarily takes place at North Campus, Edmonton.

Working at the University of Alberta

The University of Alberta acknowledges that we are located on Treaty 6 territory, and respects the histories, languages and cultures of First Nations, Métis, Inuit and all First Peoples of Canada, whose presence continues to enrich our vibrant community.

The University of Alberta is a community of knowledge seekers, change makers and world shapers who lead with purpose each and every day. We are home to over 14,000 faculty and staff, more than 40,000 students and a growing community of 300,000 alumni worldwide.

Your work will have a meaningful influence on a fascinating cross-section of people — from our students and community members, to our renowned researchers and innovators, making discoveries and generating solutions that make the world healthier, safer, stronger and more just. Learn more.

Working for the Information and Privacy Office

The Information and Privacy Office (IPO) helps students, staff, and the public about the operational impact of privacy legislature and to answer general questions on how the University will collect, use, disclose and protect your information.

The IPO was established to ensure the effective implementation and administration of the requirements of the Freedom of Information and Protection of Privacy Act. This office coordinates the university's response to requests for access to information and assists in the preparedness of the university to the requirements of the Act. 

Position

The University of Alberta is seeking a dedicated and experienced Senior Information and Privacy Advisor to join our Information and Privacy Office.

Reporting to the Director of the Information and Privacy Office, the Senior Information and Privacy Advisor is responsible for facilitating and ensuring University-wide compliance with access and privacy legislation. These obligations are primarily governed by the Freedom of Information and Protection of Privacy Act ("FOIP Act"),  the Health Information Act ("HIA")  or any successor legislation.

This position plays a critical role in managing the University’s complex and sensitive access to information requests, investigating significant privacy breaches, and conducting privacy risk assessments. The Senior Information and Privacy Advisor provides expert guidance to faculties and units across the University to uphold compliance with applicable laws.

Key responsibilities include independently preparing responses to complex, high-volume, and reputationally sensitive access requests under the FOIP Act, coordinating with department FOIP liaison officers, and offering expert advice on privacy compliance. This role also involves engaging with legal counsel on sensitive compliance issues, conducting privacy and security assessments, and reviewing initiatives such as research projects, contracts, and guidelines involving personal information. This position supports the development of privacy-related guidelines, standards, and training programs while serving as a trusted resource for University leadership and community members.

Duties

Access Requests

• Independently coordinate and prepare responses to complex and sensitive formal access requests under the FOIP Act.
• Collaborate with University department FOIP liaison officers to gather and review responsive records.
• Conduct detailed, line-by-line reviews of records, making independent decisions on FOIP Act applications.
• Liaise with applicants and University departments to clarify scope, timelines, and fees.
• Manage reviews of the University’s responses by the Office of the Information and Privacy Commissioner and work towards resolutions.

Privacy Compliance and Risk Assessments

• Investigate large, complex privacy breaches and develop remedial action plans.
• Conduct privacy risk assessments and Privacy Impact Assessments (PIAs).
• Review and provide guidance on research projects, contracts, surveys, and third-party agreements involving personal information.
• Collaborate with the Office of the Chief Information Security Officer on privacy and security reviews.

Advisory Services

• Act as an expert resource on access and privacy legislation for faculties, departments, and leadership across the University.
• Provide expert advice on compliance with FOIP and HIA in various operational and research contexts.
• Develop and deliver training sessions and communication programs related to access and privacy compliance.

Policy Development and Communication

• Draft and review University policies, standards, and guidelines for compliance with FOIP and HIA.
• Build and maintain strong communication networks within the University and with external stakeholders, including the Office of the Information and Privacy Commissioner.
• Participate in Post-Secondary FOIP Coordinators Network meetings.

Continuous Improvement

• Keep abreast of changes in access and privacy legislation and their implications for the University.
• Assist with maintaining a Directory of Personal Information Banks as required under FOIP.
• Identify trends and recommend strategies to enhance University-wide compliance.

Qualifications

Education:

• University degree in a related field is required (a degree in Law or in Library & Information Studies is preferred; examples of other degrees or designations in a related field include Public Administration, Business, or Social Sciences).
• Preferred: University of Alberta Graduate of the Information Access and Protection of Privacy (IAPP) certificate program or Certified Information Privacy Professional (CIPP/C) designation from the International Association of Privacy Professionals.
• Equivalencies will be considered.

Experience:

• Minimum of 4 years of direct experience in access and privacy, including managing complex access to information requests.
• Proven knowledge and experience with applying Alberta’s FOIP Act, HIA, and related legislation.
• Familiarity with administrative or technical solutions affecting privacy compliance.

Skills and Competencies:

• Exceptional organizational and time management skills to manage complex caseloads.
• Strong analytical skills for detailed document reviews and issue resolution.
• Excellent written and verbal communication, diplomacy, and negotiation skills.
• Ability to establish and maintain professional relationships across a decentralized organization.
• Adaptability to evolving technologies and circumstances in a dynamic environment.
• Strong judgment and risk assessment capabilities, balancing access and privacy principles.