Privacy Impact Assessment (PIA) Specialist

Tangentia; Toronto; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading technology consulting firm is seeking a Senior Privacy Impact Assessment Specialist to manage privacy risks and ensure compliance in Toronto. With over 10 years of experience required, the role focuses on conducting comprehensive assessments, implementing best practices, and influencing policy development to protect personal information. This hybrid position allows flexibility while demanding strong analytical skills and expertise in privacy methodologies.

Qualifications

• 10+ years of experience in privacy impact assessments and risk management.
• Strong background in information technology and legal dimensions of privacy.
• Proficient in leading operational risk assessments and developing compliance strategies.

Responsibilities

• Conducting privacy impact assessments and managing associated risks.
• Leading privacy compliance initiatives and developing relevant policies.
• Implementing best practices in information privacy management.

Skills

Privacy impact assessment methodologies

Threat and risk analysis principles

Policy development

Information technology concepts

Political and legal dimensions of privacy

Managing privacy risks

Operational risk assessments

Implementing privacy best practices

Job description

Role: Privacy Impact Assessment (PIA) Specialist - Senior

Location: Toronto, ON

Duration: 1 year +

Hybrid - Candidate MUST work 3 days onsite and 2 days remote

Must Have: 10+ years of experience in the following:

Job Description

1. Privacy impact assessment methodologies, tools and techniques
2. Application of threat and risk analysis principles, program analysis, business analysis
3. Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection
4. Practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e., information management, knowledge management, intellectual property/copyright, information technology and electronic service delivery channels)
5. Practical knowledge of broad political, legal, fiscal, social and governance dimensions to ensure that privacy principles, directives, notices and directions are considered in the development of new programs/initiatives
6. Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI)
7. Leading end-to-end operational risk assessments, selecting risk methodologies, identifying privacy compliance gaps, priorities, dependencies and redundancies, and recommending process remediation or simplification
8. Implementing information privacy best practices