Senior Privacy Impact Assessment (PIA) Specialist

ThoughtStorm Inc.; Toronto; On-site; CAD 100,000 - 150,000; Full time

Job summary

ThoughtStorm Inc. seeks a privacy-focused professional to lead and conduct PIAs for new technologies, information systems, digital initiatives, programs and policies, identifying privacy risks and recommending mitigations.

You will apply Ontario privacy laws (FIPPA, MFIPPA, PHIPA) and familiar with PIPEDA and IPC Ontario jurisprudence, with strong IT security and data flow knowledge. The role involves advisory services to ministries, stakeholders, and technical teams, with leadership and

Responsibilities

• Lead and conduct Privacy Impact Assessments (PIAs) for new technologies and programs to identify privacy risks.
• Strong knowledge of Ontario privacy laws including FIPPA, MFIPPA, PHIPA, and familiarity with PIPEDA.
• Experience applying public sector PIA processes and tools, privacy policies, and Fair Information Practices.
• Assess privacy and security risks, interpret compliance requirements, and recommend mitigations.
• Strong technical knowledge of IT security, data flows, system interfaces, and IT system design.
• Develop and interpret data flow diagrams, business process diagrams, and privacy risk methodologies.
• Provide strategic privacy advisory services to government ministries, stakeholders, technical teams, and management.
• Demonstrated leadership and stakeholder management, including team coordination and cross-functional collaboration.
• Knowledge of records management, information classification, retention and Freedom of Information administration, and AODA.
• Experience with Digital Identity Frameworks and Standards is an asset.
• Experience with Ontario government policies, business case development, project approvals, privacy training.

Job description

• Lead and conduct Privacy Impact Assessments (PIAs) for new technologies, information systems, digital initiatives, programs, and policies to identify and mitigate privacy risks.
• Strong knowledge of Ontario privacy legislation, including FIPPA, MFIPPA, PHIPA, and familiarity with federal PIPEDA, the US PATRIOT Act, and IPC Ontario jurisprudence.
• Experience applying Public sector Privacy Impact Assessment processes and tools, privacy policies, directives, standards, and Fair Information Practices.
• Assess privacy and security risks, interpret compliance requirements, and recommend privacy-enhancing practices and effective risk mitigation strategies.
• Strong technical knowledge of IT security, information architecture, system interfaces, data flows, and IT system design.
• Ability to develop and interpret data flow diagrams, business process diagrams, and privacy risk assessment methodologies.
• Provide strategic privacy advisory services to government ministries, stakeholders, technical teams, and management on legislative and policy compliance.
• Demonstrated leadership, stakeholder management, and communication skills, including team coordination, workload management, and cross-functional collaboration.
• Knowledge of records management, information classification, retention and disposition, Freedom of Information administration, and AODA requirements.
• Experience with Ontario government policies, business case development, project approvals, privacy training, and Digital Identity Frameworks and Standards is an asset.