Access and Privacy Specialist

Jobtailor; Winnipeg; On-site; CAD 80,000 - 110,000; Full time

Job summary

Jobtailor is seeking a dedicated Access and Privacy Advisor to support enterprise-wide compliance with Manitoba’s FIPPA and PHIA within a Crown corporation setting. The role spans providing privacy advisory services, coordinating access requests, and ensuring timely formal responses.

The ideal candidate will have a post-secondary degree, at least five years of related experience, and strong knowledge of FIPPA/PHIA with a focus on practical governance, training, and risk mitigation in a

Qualifications

• Post‑secondary degree in social sciences, public or business administration or another relevant discipline.
• Five years of related experience working with access and privacy issues.
• Knowledge of FIPPA/PHIA and related provincial acts.
• Strong judgment, diplomacy and political acumen for sensitive inquiries.
• Understanding of fair information handling principles and standards.
• Organizational, facilitation and presentation skills.
• Knowledge of Manitoba acts affecting records and privacy.
• Familiarity with The Personal Information Protection and Electronic Documents Act (Canada).

Responsibilities

• Support compliance and operational alignment with Manitoba’s FIPPA and PHIA in a Crown corporation environment.
• Provide access and privacy advisory services across business units.
• Coordinate, prepare and respond to FIPPA/PHIA requests and access forms.
• Assemble and review records for formal responses.
• Determine exemptions, severing and potential transfer of records.
• Document exemptions and monitor response progress within legislated timeframes.
• Communicate with applicants and third parties on inquiries and timing.
• Investigate privacy breaches and recommend corrective measures.
• Develop, maintain and provide privacy training.
• Coordinate privacy impact assessments and ongoing privacy compliance monitoring.

Skills

FIPPA Compliance

PHIA Compliance

Access and Privacy Advisory Services

Privacy Training Development

Records Management Knowledge

Education

Post-secondary degree in social sciences or public/business administration

Job description

• Support enterprise-wide compliance and operational alignment with Manitoba’s FIPPA and PHIA within a Crown corporation environment


• Provide access and privacy advisory services across business units


• Coordinate, prepare and respond to requests, forms and Requests for Access under FIPPA and PHIA


• Coordinate the assembly and review of records and documentation for formal responses


• Determine accessibility, statutory exemptions, severing and potential transfer of records


• Document exemptions, monitor response progress and provide formal responses within legislated time frames


• Arrange response extensions and prepare cost estimates as required


• Communicate with applicants and affected third parties regarding inquiries, timing and follow-up


• Receive, investigate, track and respond to refusal‑of‑access and privacy complaints lodged with the Manitoba Ombudsman


• Implement remedial action recommended by the Ombudsman


• Prepare quarterly and annual reports on request volumes, metrics and trends


• Investigate privacy breaches and recommend immediate and long‑term corrective measures


• Develop, maintain and provide privacy training


• Coordinate privacy impact assessments and ongoing privacy compliance monitoring


• Draft access and privacy policies and procedures


• Work with Information & Technology on information handling and privacy practices


• Collaborate with legal counsel, management, departments and committees on consent forms, privacy notices and statutory compliance


• Assist with Memoranda of Understanding and monitor third‑party privacy arrangements


• Work with Human Resources and business units to ensure consistent privacy compliance and sanctions


• Monitor changes to legislation, regulations and relevant court and tribunal decisions


• Advise divisions and departments on access to information and personal privacy

Requirements

• Post‑secondary degree in social sciences, public or business administration or another relevant discipline


• Five years of related experience working with access and privacy issues


• Related education, training and experience may be considered


• Knowledge and understanding of FIPPA and PHIA, and to a lesser extent, the access and privacy provisions of The Mental Health Act


• Strong judgment, diplomacy and political acumen regarding sensitive inquiries


• Understanding of internationally recognized principles and standards for fair information handling


• Organizational, facilitation and presentation skills


• Knowledge and understanding of the records management provisions of The Manitoba Public Insurance Corporation Act, The Drivers and Vehicles Act, and The Highway Traffic Act


• General familiarity with The Archives and Recordkeeping Act and the Personal Information Protection and Electronic Documents Act (Canada)

Core Competencies

Demonstrates expertise in access and privacy compliance, particularly with FIPPA and PHIA, while effectively coordinating responses and training across business units. Strong ability to analyze and implement privacy policies, monitor compliance, and manage sensitive inquiries.

Highest‑signal resume keywords

• FIPPA Compliance


• PHIA Compliance


• Access and Privacy Advisory Services


• Privacy Training Development


• Records Management Knowledge

Hard Skills

• Access and Privacy Policy Drafting


• Privacy Impact Assessment Coordination


• Statutory Exemption Determination


• Privacy Breach Investigation


• Formal Response Preparation

Soft Skills

• Strong Judgment


• Diplomacy


• Political Acumen


• Organizational Skills


• Facilitation Skills

Industry Keywords

• Manitoba Ombudsman


• The Mental Health Act


• The Archives and Recordkeeping Act


• The Personal Information Protection and Electronic Documents Act


• The Manitoba Public Insurance Corporation Act