Director, Legal Counsel, Data & Privacy

L’utilisation du masculin à pour but d’alléger le texte

Venez faire votre différence dans les communautés à travers le Canada, où l'authenticité, la confiance et l'établissement de liens sont valorisés - alors que nous façonnons l'avenir du commerce de détail au Canada, ensemble. Notre position unique en tant que l'un des plus grands employeurs du pays, celle associée à notre engagement à avoir un impact positif sur la vie de tous les Canadiens, viens offrir à nos collègues une gamme d'opportunités et d'expériences pour aider les Canadiens à Vivre Bien, Vivre Pleinement.

Chez Les Compagnies Loblaw Limitée, nous réussissons grâce à la collaboration, à l'engagement et nous plaçons la barre haute pour nous-mêmes et ceux qui nous entourent. Que vous débutiez votre carrière, que vous réintégriez le marché du travail ou que vous recherchiez un nouvel emploi, votre place est avec nous.

Director, Legal Counsel, Data & Privacy | Brampton

The Data Trust Office is an enablement-first function. We embed privacy and data governance into products and services to build customer trust and loyalty, ensuring compliance by design.

As Director, you will play a pivotal role in shaping and driving Loblaw's enterprise privacy and data governance program. You will be accountable for executing the Data Trust strategy, overseeing risk management and compliance activities, developing policy, managing breaches, and fostering stakeholder engagement across the business.

As Legal Counsel, you will serve as a key partner to the commercial legal team, providing privacy, data and cybersecurity subject matter expertise on complex commercial arrangements and supporting the development, review and negotiation of appropriate contractual protections.

In both functions you will provide strategic, practical and business-oriented legal advice on privacy, data governance, CASL and related regulatory matters to the business, helping them navigate complex legal requirements while enabling the responsible use of data and innovation.

This role reports to the Enterprise Privacy Officer.

WHAT YOU'LL DO:

• Champion privacy as a business enabler by driving stakeholder engagement and embedding privacy and data governance into products and services.
• Provide strategic legal advice on privacy, data governance, CASL and related regulatory matters across the business, including in connection with new products, services, technologies, digital initiatives, data uses, artificial intelligence, marketing and other strategic projects and transactions.
• Advise on the interpretation and application of privacy laws, CASL, related regulatory requirements and regulator guidance, translating legal requirements into practical, business-oriented advice.
• Conduct Data and Privacy Impact Assessments (DPIAs), identify and evaluate legal, regulatory, data and privacy risks, and provide practical, risk-based recommendations on appropriate controls and mitigation strategies.
• Partner with commercial legal counsel as the privacy, data and cybersecurity subject matter expert on commercial agreements involving personal information, data sharing, technology, vendors, artificial intelligence or access to Loblaw systems and data. Provide practical legal advice and support the negotiation and resolution of complex or escalated privacy, data and cybersecurity issues.
• Provide legal advice on consent and transparency requirements, data governance and lifecycle matters, and the responsible use of data, including in connection with artificial intelligence and emerging technologies.
• Oversee privacy breach, complaint and investigation management activities, including intake, escalation, investigation and response, and provide legal advice on notification obligations, regulatory risk, remediation and response strategy.
• Advise on privacy and CASL regulatory matters and engage with regulators, as appropriate, in connection with regulatory inquiries, investigations, complaints and other regulatory matters, including engagement and management of external legal counsel as appropriate.
• Recruit, lead, and develop a high-performing data and privacy team, including coaching and developing privacy professionals and fostering strong legal and risk judgment across the team.
• Stay ahead of evolving national privacy and health privacy laws, global regulatory developments, privacy-enhancing technologies, and emerging innovations (e.g., AI/LLMs), CASL and related regulatory developments, and advise on their legal, regulatory and business implications.
• Partner cross-functionally across the enterprise to continuously improve privacy-related policies, templates, guidance, processes and controls and create efficiencies while maintaining appropriate legal, cybersecurity and regulatory safeguards.

WHAT YOU BRING:

• Law degree and member in good standing with the Law Society of Ontario, with 7-10 years of relevant experience in an in-house legal department and/or compliance function, including significant experience advising on privacy and related regulatory matters. Experience at a leading law firm is also considered an asset.
• Practical, solutions-oriented and agile, with strong legal and business judgment and a demonstrated ability to navigate complexity and ambiguity, move beyond identifying risk, and develop creative, pragmatic solutions that enable business objectives while appropriately managing legal, privacy and data risk.
• A supportive and engaged people leader who invests in the development of their team and creates an inclusive, high-performing environment where people are empowered, supported and accountable.
• Thrives in a fast-paced, dynamic environment, with the agility to manage competing priorities, make sound decisions and drive matters forward.
• Strong collaborator and trusted advisor who builds effective relationships, influences stakeholders and facilitates practical solutions across the enterprise.
• Excellent communication, organizational and presentation skills, with the ability to distill complex legal, technical and privacy issues into clear, concise and actionable advice for stakeholders at all levels of the organization.
• Demonstrated leadership experience delivering privacy and data programs and advising on complex privacy, data and regulatory matters within large, matrixed organizations.
• Significant experience interpreting and applying Canadian federal and provincial privacy laws, CASL and related regulatory requirements to complex business and technology initiatives, including digital products and services, analytics, artificial intelligence, marketing and other data-driven activities.
• Demonstrated experience conducting Data and Privacy Impact Assessments (DPIAs), evaluating risk and developing practical controls and mitigation strategies.
• Proven experience managing regulatory risk and engaging directly with privacy regulators, including in connection with inquiries, investigations, complaints or other regulatory matters.
• Experience drafting, reviewing and negotiating privacy and cybersecurity provisions in complex commercial agreements, including data processing, data sharing, technology and vendor arrangements.
• Experience advising on privacy incidents and breach response, including assessing legal and regulatory obligations and supporting cross-functional response and remediation efforts.
• Experience in corporate retail, direct-to-consumer or other complex, highly regulated environments is an asset.
• CIPP-C or equivalent privacy certification preferred; AIGP and DCAM certifications are considered an asset.

Notre engagement envers la durabilité et l'impact social est un élément essentiel de notre façon de faire des affaires. Nous concentrons notre attention sur les domaines où nous pouvons avoir le plus grand impact. Notre approche de la durabilité et de l'impact social repose sur trois piliers - l'environnement, l'approvisionnement et la communauté. Nous recherchons constamment des moyens de faire preuve de leadership dans ces domaines importants. Nos valeurs ÊTRE – Engagement, Tient à coeur, Respect et Excellence – guident toutes nos prises de décision et prennent vie à travers notre culture bleue. Nous offrons à nos collègues des carrières progressives, une formation complète, de la flexibilité ainsi que les nombreux avantages compétitifs - voici quelques-unes des nombreuses raisons pour lesquelles nous sommes classés au palmarès des meilleurs employeurs du Canada, au palmarès des meilleurs employeurs pour la diversité au Canada, au palmarès des employeurs les plus verts au Canada et au palmarès des meilleurs employeurs pour les jeunes au Canada.

Si vous ne savez pas si votre expérience correspond à toutes les exigences ci-dessus, nous vous encourageons à postuler quand même. Nous recherchons des perspectives de candidatures variées, qui incluent des expériences diverses que nous pouvons ajouter à notre équipe.

Nous nous concentrons depuis longtemps sur la diversité, l'équité et l'inclusion, car nous savons que cela fera de notre entreprise un meilleur lieu de travail et de magasinage. Nous nous engageons à créer des environnements accessibles pour nos collègues, candidats et clients. Les demandes d'aménagement en raison d'un handicap (qui peut être visible ou pas, temporaire ou permanent) peuvent être faites à n'importe quel stade de la demande et de l'emploi. Nous encourageons les candidats à faire connaître leurs besoins en matière d'accommodation afin que nous puissions offrir des opportunités équitables.

Veuillez noter:
Les candidats âgés de 18 ans ou plus doivent effectuer une vérification des antécédents criminels. Les détails seront fournis lors du processus d’embauche.

Hiring Range / Échelle salariale à l’embauche :$170,000.00 - $220,000.00 / 170.000,00$ - 220.000,00$ (per year / par an)A candidate’s experience and knowledge as well as the geographical region in which the position is located may be factored into the pay a candidate receives for this position. This posting is for an existing vacancy. The Company uses artificial intelligence for the purpose of screening, assessing and/or selecting applicants for this position. / L’expérience et les connaissances d’un candidat ainsi que la région géographique dans laquelle le poste est situé peuvent être prises en compte dans la rémunération qu’un candidat reçoit pour ce poste. Cette offre d’emploi concerne un poste vacant existant. L’entreprise utilise l’intelligence artificielle dans le but de filtrer, d’évaluer et/ou de sélectionner les candidats à ce poste.

#FR

#SS #LEGAL #ON