AI Data Protection Architect

This is a fully remote position, open to applicants in Canada.

📋 Description

• Define and uphold enterprise architectures centered on privacy-by-design and privacy-by-default principles.

• Design data protection controls for applications, infrastructure, cloud, and data platforms.

• Set standards for data classification, handling, retention, archiving, and secure destruction.

• Ensure uniform application of data protection controls across on-premise, cloud, and hybrid systems.

• Develop privacy governance frameworks that comply with GDPR, Quebec Law 25, PIPEDA, and ISO/IEC 27701.

• Establish control baselines, assurance mechanisms, and compliance monitoring models.

• Assist in executive decision-making regarding privacy risks, compliance status, and regulatory exposure.

• Collaborate with legal, internal audit, and GRC teams.

• Design strategies for encryption, key management, secrets management, and data loss prevention (DLP).

• Ensure robust access controls and segregation of duties for sensitive data.

• Lead privacy risk assessments for complex systems, cloud platforms, AI solutions, and analytics environments.

• Develop solutions for data discovery, data mapping, and records of processing activities (RoPA).

• Integrate privacy requirements into the software development life cycle (SDLC), DevSecOps, and data engineering pipelines.

• Support privacy needs for AI, machine learning, and advanced analytics applications.

• Guarantee auditability, traceability, and accountability of data usage.

• Define secure data-sharing architectures with third-party vendors.

• Establish data protection requirements for outsourcing, SaaS, and cloud service providers.

• Design controls for cross-border data transfers and data residency.

• Aid in data breach detection, response, and notification processes.

• Provide advice during privacy incidents and regulatory reporting obligations.

• Ensure that evidence collection and documentation comply with regulatory expectations.

• Act as a senior subject matter expert in data protection and privacy architecture.

• Mentor privacy analysts, GRC professionals, and security architects.

• Communicate privacy risks, architectural choices, and mitigation plans to executives and boards.

• Represent the organization with regulators, auditors, and external stakeholders as necessary.

⛳️ Requirements

• Extensive expertise in data protection and privacy-by-design principles.

• Strong comprehension of GDPR, Quebec Law 25, PIPEDA, and ISO/IEC 27701.

• Proficient in designing enterprise data protection architectures across applications, databases, cloud platforms, data lakes, and analytics environments.

• Expertise in data classification, data mapping, and records of processing activities (RoPA).

• In-depth knowledge of encryption, key management systems (KMS, HSM), tokenization, anonymization, pseudonymization, and Data Loss Prevention (DLP).

• Experience in architecting Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Privileged Access Management (PAM) controls for sensitive data.

• Capability to design data retention, archiving, and secure data destruction strategies.

• Familiarity with Azure Purview/Microsoft Purview, AWS Macie, and Google Cloud DLP.

• Experience in integrating privacy and data protection into SDLC, DevSecOps pipelines, data engineering, and analytics workflows.

• Ability to evaluate privacy risks in AI, machine learning, and large-scale data processing systems.

• Strong understanding of logging, monitoring, auditability, and evidence collection.

• Experience with OneTrust, TrustArc, and ServiceNow GRC.

• CIPP/E, CIPP/C, CIPM, ISO/IEC 27701 Lead Implementer/Lead Auditor, CDPSE, or CISSP certification (CISSP noted as an asset).

🏝️ Benefits

• 4 weeks of cumulative vacation starting from day one.

• Flexible working hours.

• Professional Development Allowance (PDA) for training, computer equipment, and physical activities.

• Training customized to your areas of expertise.

• Registered Retirement Savings Plan (RRSP) with employer contribution of up to 3% of gross salary.

• Modular group insurance plan.

• Reimbursement for public transportation or parking when necessary.

• Referral bonuses.

• 11 statutory holidays.

• Personal days.

• An active social life including 5to7 events, a social club, healthy snacks, coffee, and more.

• Flexibility, autonomy, and a strong people-first culture.

• A work environment focused on diversity, inclusion, and innovation.