Privacy Impact Assessment Specialist

Bevertec; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

Bevertec in Toronto, ON, is seeking a Senior Privacy Impact Assessment Specialist to provide dedicated privacy subject matter expertise for IT projects, including EHR initiatives and health information programs.

The role requires at least 5 years of health care privacy experience, strong PHIPA knowledge, and a track record drafting data sharing agreements. Onsite collaboration with healthcare and IT teams is expected.

Qualifications

• Minimum 5 years of health care experience conducting privacy assessments and reviews on medium to high complexity projects.
• Direct operational privacy experience in a health sector and/or IT environment.
• Minimum 5 years of experience drafting and reviewing privacy requirements for data sharing agreements.
• Experience with PHIPA, including Health Information Network Providers (HINP) and Electronic Service Providers (ESP).
• Familiarity with API functionality and management.
• Familiarity with EMR or Hospital Information System (HIS) infrastructure, design, and data flows.

Responsibilities

• Provide dedicated privacy subject matter expertise to IT projects (e.g., PHI protection, EHR initiatives, provincial viewers, and patient documentation initiatives).
• Develop and maintain privacy policies, procedures, requirements, or controls.
• Draft and review privacy requirements for data sharing agreements.
• Ensure PHIPA/HINP/ESP compliance and manage prescribed statuses as an asset.

Skills

Healthcare privacy

Privacy assessments

Policy development

Data sharing agreements

PHIPA knowledge

API familiarity

EMR/HIS data flows

Tools

EMR/HIS familiarity

Job description

Privacy Impact Assessment (PIA) Specialist - Senior - Healthcare

End Date

2027-03-31

Assignment Type

Onsite

Office Location: Toronto, ON

Overview: Senior Privacy Specialist to provide dedicated privacy subject matter expertise to assist with supporting privacy matters related to a number of key Information Technology projects that include, but are not limited to, Provincial Health Services Directory, Electronic Health Record (EHR) initiatives, Provincial Viewers, and Patients before Paperwork initiatives.

• Minimum 5 years' health care experience conducting privacy assessments and reviews on medium to high complexity projects
• Direct operational level privacy experience in a health sector and/or IT environment or both
• Minimum 5 years' experience in developing privacy policies and procedures, requirements, or controls
• Minimum 5 years' experience drafting and reviewing privacy requirements for data sharing agreements
• Experience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset.
• Familiarity with the Application Programming Interface (API) functionality and management
• Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows

Note: AI-enabled tools may be used to sort applications based on job-related criteria. All AI generated results are vetted by our team and the decision of which candidates move forward is always made by a human.