
Sr. Privacy Analyst
- Waterloo, ON
- Permanent
- Temps-plein
- Lead and manage privacy incidents across jurisdictions, applying global data protection laws (e.g., GDPR, PIPEDA, US state laws) throughout the incident lifecycle—from logging, investigating, resolving, notifying and closing.
- Maintain OpenText’s Record of Processing Activities (RoPA) and conduct Privacy and Data Protection Impact Assessments (DPIAs).
- Collaborate with internal teams, SMEs, vendors, and auditors to support privacy compliance readiness, including M&A procedures.
- Research and interpret global privacy regulations to align OpenText policies and prepare compliance reports and stakeholder presentations.
- Manage Data Subject Rights (DSR) requests and promote privacy awareness through training, communication, and continuous improvement initiatives.
- Develop and maintain privacy metrics, dashboards, and risk methodologies aligned with Global Data Protection and Privacy standards.
- Lead and/or assist with the development of ongoing privacy training to the workforce, including presentations on global data protection regulations.
- Possess 5-8 years of previous professional experience.
- Bachelor’s degree in Business, IT, or related field with 4+ years’ experience in Compliance, Privacy, Audit, or Risk Management.
- Strong knowledge of GDPR, global privacy laws, and emerging legislation; experienced in privacy incident management and handling DSR requests.
- Familiarity with security controls, risk management frameworks, and compliance models; experience with ISO 27001, ISO 27018, ISO 27701, PCI, HIPAA, or equivalent.
- Demonstrated ability to work independently, manage ambiguity, and collaborate with global, remote teams across time zones.
- Excellent research, analytical, organizational, and communication skills with strong attention to detail.
- Industry certifications such as CIPM, CIPP, ISO 27001/ISO 27701 Lead Implementer/Auditor are a plus.