Senior Privacy Impact Assessment (PIA) Specialist

ThoughtStorm Inc.; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

ThoughtStorm Inc. in Toronto seeks a Senior Privacy Impact Assessment Specialist to lead privacy assessments for new technologies, digital solutions, information systems, programs, and policies.

You will apply strong knowledge of PHIPA, FIPPA, PIPEDA and other privacy laws, with a track record of leading assessments involving personal information and health information. You will collaborate with technical and non-technical teams to develop risk mitigations and privacy architectures.

Qualifications

• Experience leading Privacy Impact Assessments for personal and health information.
• Strong knowledge of FIPPA, PHIPA, PIPEDA and related privacy laws and government policies.
• Proven ability to communicate complex privacy concepts to technical and non-technical stakeholders.

Responsibilities

• Lead privacy assessments for new technologies, digital solutions, information systems, programs and policies.
• Develop privacy risk mitigation strategies and data flow/architecture documentation.
• Engage stakeholders across public-sector and cross-functional teams to drive compliant solutions.

Skills

Privacy risk assessment

Privacy by design

Leadership

Stakeholder engagement

Documentation & presentation

Regulatory knowledge

Job description

We are seeking a Senior Privacy Impact Assessment (PIA) Specialist to lead privacy assessments for new technologies, digital solutions, information systems, programs, and policies.

Strong hands-on experience with FIPPA, PHIPA, PIPEDA and other privacy legislation, regulations, standards, and government policies is required.

Must have proven experience leading and conducting Privacy Impact Assessments involving personal information and personal health information.

Experience assessing online/digital solutions, third-party applications, service integration providers, and public-sector solutions is highly valued.

Strong technical understanding of privacy and security risks, APIs, web applications, backend integrations, legacy systems, and cloud-based technologies.

Ability to analyze and develop data flow diagrams, business process diagrams, architecture documentation, and privacy risk/mitigation strategies.

Experience with privacy protection standards, encryption, information security, information architecture, data protection, and privacy-enhancing practices.

Strong leadership, communication, documentation, presentation, and stakeholder engagement skills across technical and non-technical teams.

Public-sector experience and familiarity with OPS PIA processes, templates, approvals, and expectations are an asset.