RQ09375 - Sr. Privacy Impact Assessment (PIA)Specialist

Source Code; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A premier consulting firm in Toronto is seeking a Senior Privacy Impact Assessment (PIA) Specialist. This role involves developing privacy assessments, leading privacy initiatives, and engaging with multiple stakeholders to ensure compliance with security and privacy practices. The ideal candidate has over 10 years of experience in managing privacy risks, especially within healthcare sectors. This position offers a hybrid work model with 3 days onsite and 2 days remote.

Qualifications

• 10+ years of experience in privacy impact assessment.
• Demonstrated experience in managing privacy risks.
• Experience with federal/provincial healthcare providers.

Responsibilities

• Develop privacy impact assessments for proposed solutions.
• Lead technical development of privacy tools.
• Engage stakeholders in privacy discussions.
• Assess proposals for compliance with privacy laws.
• Support projects ensuring compliance with privacy best practices.

Skills

Policy development

Managing privacy risks

Identifying emerging privacy issues

Report preparation

Experience with healthcare providers

Job description

RQ09375 - Sr. Privacy Impact Assessment (PIA) Specialist

222 Jarvis Street, Toronto

Hybrid - work 3 days onsite and 2 days remote

Contract (9 months, possible extension)

3 Openings

• Develop privacy impact assessments and review recommendations from the privacy impact assessment (PIA) of proposed solutions and business processes.
• Lead and provide technical expertise in developing access and privacy tools to facilitate the implementation of key strategy data and digital initiatives, including security mechanisms related to the creation, collection, storage, access, retrieval, and disclosure of Personal Health Information (PHI).
• Engage and facilitate privacy-related discussions with a wide range of business, IT, legal, and privacy stakeholders across the ministry and government agencies.
• Examine complex program, policy, and information system proposals to assess and document business flow and context; perform stakeholder analysis, public/private partnerships, governance structures, and feasibility assessments concerning the protection of Personal Health Information (PHI) collected and retained.
• Support projects to ensure compliance with security and privacy best practices, such as the Personal Health Information Privacy Act (PHIPA) (2004).

Must-Haves:

• 10+ years of experience in:
• Understanding policy development to lead or participate in developing options and strategies on information management and privacy protection.
• Managing privacy risks in the collection, use, and disclosure of Personal Health Information (PHI).
• Demonstrated experience and competency in identifying and evaluating emerging privacy issues, trends, and their impact on government policy directions.
• Proven ability to prepare comprehensive reports, options analyses, briefing materials, and presentations, and to propose responses to privacy issues.
• 5+ years of experience working with federal/provincial/broader public-sector healthcare providers.