RQ09302 - Privacy Impact Assessment (PIA) Specialist - Senior

Rubicon Path; Toronto; On-site; CAD 70,000 - 100,000; Full time

Job summary

A leading company in privacy compliance is seeking a Privacy Assessment Specialist to lead the evaluation of technologies and policies against privacy laws. The ideal candidate will have extensive knowledge of privacy legislation, experience in conducting assessments, and strong leadership and communication skills. This role offers the opportunity to make a significant impact on data protection practices within the organization.

Qualifications

• Proven experience with privacy legislation (FIPPA, PHIPA, PIPEDA).
• Experience conducting privacy assessments involving personal and health information.
• Familiarity with Ontario's privacy authorities and regulations.

Responsibilities

• Lead or support the development of privacy impact assessments.
• Ensure compliance with privacy legislation and regulations.
• Develop risk assessment tools and manage personal information.

Skills

Privacy assessment experience

Legislative knowledge

Policy review

Technical understanding of privacy risks

Leadership skills

Communication skills

Stakeholder engagement

Job description

Responsibilities:
Lead or support the development of privacy impact assessments to evaluate new technologies, information systems, or policies for compliance with legal and policy privacy requirements, risk mitigation, and client concerns.
Ensure program compliance with provincial, municipal, federal, and private sector privacy legislation, regulations, standards, guidelines, and international privacy principles.

General Skills:
Extensive knowledge of privacy and security concepts, trends, and issues, including their impact on business processes and compliance requirements.
Experience researching and applying relevant privacy laws, regulations, and jurisprudence, especially relating to Ontario's privacy authorities.
Proficiency in conducting Privacy Impact Assessments in the public sector.
Knowledge of privacy best practices, FIPPA, MFIPPA, PHIPA, PIPEDA, and US PATRIOT Act.
Familiarity with OPS Privacy Impact Assessment processes and tools.
Understanding of related disciplines such as IT security, legal processes, risk management, and project management.

Operational Program and Business Design Skills:
Ability to lead or support privacy assessments, develop data flow and business process diagrams, and collaborate with external experts.
Excellent communication skills for diverse audiences.
Understanding of data protection implications of policies and business initiatives.

Technology and Systems Knowledge:
Analytical skills to assess privacy implications of IT systems and policies.
Knowledge of information architecture, data flows, and security measures.

Information and Record Keeping:
Experience developing risk assessment tools, policies, and procedures for managing personal information.
Knowledge of records management policies, including classification, retention, and accessibility regulations like AODA.

Desirable Skills:
Professional certifications in IT security or architecture.
Experience in privacy training and familiarity with Ontario government policies and procedures.

Experience and Skill Set Requirements:

• 40% - Privacy assessment experience, legislative knowledge, and policy review.
• 30% - Technical understanding of privacy risks, PIAs involving various platforms, and security practices.
• 20% - Leadership and communication skills, including stakeholder engagement and documentation.
• 5% - Digital identity frameworks and standards.
• 5% - OPS experience with privacy assessments and processes.

Must Haves: Proven experience with privacy legislation (FIPPA, PHIPA, PIPEDA), conducting privacy assessments involving personal and health information, especially within Ontario health or D&V systems.

Nice to Have: Prior OPS background.