RQ11302 - Privacy Impact Assessment (PIA) Specialist - Senior

Flexstaf IT; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

Flexstaf IT seeks a privacy professional to lead and/or support Privacy Impact Assessments (PIA) using OPS tools. The role requires cross-disciplinary knowledge in IT security, policy, risk, and governance to map data flows and architectures.

You will coordinate input from internal teams and external experts to ensure compliant privacy practices. The ideal candidate has strong communication skills for technical and business audiences and can translate complex privacy requirements into actionable

Qualifications

• Familiarity with OPS Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services.
• Good understanding of related disciplines such as IT security, IT system design, policy development (privacy or security), business architecture, legal processes, FOI administration, business analysis, risk management, project management.
• Ability to lead, manage or support the development of a PIA independently or with a team.

Responsibilities

• Lead or support the development of a PIA by directing input from stakeholders.
• Create and interpret data flow diagrams and business process diagrams.
• Seek input from external experts as required.

Skills

PIA process knowledge

OPS privacy tools

IT security understanding

Policy development

Business analysis

Risk management

Project management

Lead development of PIA

Data flow diagrams

External expert coordination

Excellent communication

IT concepts knowledge

Information governance

Records management

AODA awareness

Privacy education/training

Govt policy familiarity

Job description

Must haves:

• Familiarity with OPS Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services;
• Good understanding of related disciplines, such as IT security, IT system design, policy development (privacy or security), business architecture, legal processes, Freedom of Information administration, business analysis, risk management, project management.
• Ability to lead, mange or support the development of a PIA either independently or as part of a team by directing and gathering input from specific individuals within the organization
• Knowledge of Information Technology concepts and processes that impact the protection of personal information, including (but not limited to) Internet tools, system interfaces, information security, information architecture and data flows

Experience and Skill Set Requirements

Policy Knowledge

• Familiarity with OPS Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services;
• Good understanding of related disciplines, such as IT security, IT system design, policy development (privacy or security), business architecture, legal processes, Freedom of Information administration, business analysis, risk management, project management.

20 points

Operational Program and Business Design Skills

• Ability to lead, mange or support the development of a PIA either independently or as part of a team by directing and gathering input from specific individuals within the organization
• Knowledge and ability to create and understand data flow diagrams and business process diagrams
• Ability to recognize the need for, and seek input from external experts as required

20 points

Communication Skills

• Excellent communication skills with technical and business audiences and non- access and privacy experts.

20 points

Technology and Systems Knowledge

• Analytical skills to understand the current and future access and privacy implications of policies, decisions and business initiatives
• Knowledge of Information Technology concepts and processes that impact the protection of personal information, including (but not limited to) Internet tools, system interfaces, information security, information architecture and data flows

20 points

Information and Record Keeping Knowledge

• Experience in developing risk assessment tools, methodologies, policies and procedures to effectively manage personal information
• Knowledge of policies, directives, standards, business rules, procedures and guidelines relating to records

10 points

Accessibility

• Knowledge and understanding of Accessibility for Ontarians with Disability Act (AODA) and related regulations and standards

5 points

Desirable Skills

• Professional certification from a related discipline such as IT security, architecture
• Experience providing education and training related to privacy
• Knowledge of, and experience with the policies and procedures of the Ontario government (e.g. business case development, project approvals and policy development)

5 points