Senior Privacy Impact Assessment Specialist

Cynet Systems Inc; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a seasoned professional to lead privacy impact assessments and enhance data protection for health information systems. This role involves developing privacy tools, ensuring compliance with legislation, and providing expert advice on complex privacy issues. The ideal candidate will have over a decade of experience in public sector healthcare, demonstrating strong analytical and communication skills. Join a dynamic team dedicated to improving public health initiatives and making a significant impact in the field of information privacy. If you're passionate about safeguarding personal health information and thrive in collaborative environments, this opportunity is for you.

Benefits

Flexible working hours

Health care benefits

Professional development opportunities

Remote work options

Team-building events

Qualifications

• 5+ years in public sector healthcare experience.
• Expertise in privacy impact assessments and risk analysis.
• Strong communication and leadership abilities.

Responsibilities

• Develop privacy impact assessments for immunization solutions.
• Provide technical expertise on privacy tools and systems.
• Ensure compliance with privacy legislation and best practices.

Skills

Privacy impact assessment methodologies

Threat and risk analysis principles

Business analysis

Policy development

Information technology concepts

Managing privacy risks

Operational risk assessments

Communication skills

Leadership skills

Problem-solving skills

Education

Bachelor's degree in a related field

Master's degree (preferred)

Tools

Project Management Institute (PMI) standards

Public Sector Unified I&T Project Methodology

GO-ITS Digital Health standards

Job description

Job Description:

Responsibilities:

1. Develop privacy impact assessments of the Ministry’s optimization of the provincial Immunization Repository and other provincial repositories and the COVaxON solution (this includes initiatives in support of immunization administration, and vaccine distribution and delivery (inventory).
2. Lead and provide technical expertise in the development of access and privacy tools to facilitate the development of I&IT requirements, implementation of security mechanisms pertaining to the creation, collection, storage, access, retrieval and disclosure of Personal Health Information (PHI).
3. Examine complex program, policy and information system proposals to assess and document business flow and context; perform stakeholder analysis, public/private partnerships, governance structures and feasibility in terms of the protection of Personal Health Information (PHI) collected and retained.
4. Support projects to ensure compliance with security and privacy best practices, such as the Personal Health Information Privacy Act (PHIPA) (2004).
5. Provide technical and systems advice on legacy systems, internet tools and system interfaces, information, security, technical architecture and data flows to improve protection of Personal Health Information (PHI).
6. Provide technical and systems advice on data flows that flow into/originate from the Immunization Repository Optimization Program - Wave 1 & 2 and other relevant provincial repositories and COVaxON solution.
7. Provide technical and systems advice on data flows to the ministry, Public Health units and other stakeholders.
8. Develop business processes and procedures that describe information flows associated with new technologies, programs, policies or information systems to illustrate how and by whom Personal Health Information (PHI) will be collected, used, disclosed and retained.
9. Using system and infrastructure architectures, document physical and/or logical separation of Personal Health Information (PHI) or security mechanisms that prevent improper access to Personal Health Information (PHI) or maintain any required separation.
10. Provide privacy expertise, consultation, and support to project team members, senior management and colleagues in MOH advising on the legislation and regulations, in an effort to resolve potential legal or privacy problems.
11. Provide analysis and advice to ministries and clusters regarding the Freedom of Information Act (FOI) and privacy implications, privacy and security concepts, of new information technologies and information systems, and assist institutions in documenting their analysis.
12. Recommend mitigation strategies and privacy enhancing technologies in accordance with Privacy Impact Assessment (PIA) procedures.
13. Identify, analyze and assess emerging and critical policy issues relating to Freedom of Information (FOI) and Protection of Privacy which may have an impact on PIA methodology.
14. Formulate policy proposals, recommendations, strategies and options for the project team and Ministry executive to address emerging issues.
15. Participate and provide PIA feedback on the planning and design of solutions in support of immunization administration and optimization, and vaccine distribution and delivery (inventory).

Experience and Skill Set Requirements:
Public Sector Experience:

1. 5+ years of experience working with federal/provincial/public-sector healthcare providers.
2. Knowledge of Public Sector Enterprise Architecture artifacts (or similar), processes and practices, and ability to produce technical documentation that comply with industry standard practices.
3. In-depth knowledge of industry standards such as Project Management Institute (PMI).
4. Knowledge of Public Sector I&IT project management methodologies.
5. Knowledge and experience with Public Sector or Public-Sector health related projects.
6. Knowledge and understanding of Ministry policy and IT project approval processes and requirements.
7. Experience adopting and adhering to Public Sector Unified I&IT Project Methodology, Public Sector Enterprise Architecture and Public Sector Gating process, and Public Sector Standard Systems Development Methodologies.
8. Experience with large complex IT Health-related projects.
9. Experience with GO-ITS Digital Health standards, and internal branch standards would be an asset.

Technical Skills:

1. Privacy impact assessment methodologies, tools and techniques.
2. Application of threat and risk analysis principles, program analysis, business analysis.
3. Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection.
4. Practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e. information management, knowledge management, intellectual property/copyright, information technology and electronic service delivery channels).
5. Practical knowledge of broad political, legal, fiscal, social and governance dimensions to ensure that privacy principles, directives, notices and directions are considered in the development of new programs/initiatives.
6. Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI).
7. Leading end-to-end operational risk assessments, selecting risk methodologies, identifying privacy compliance gaps, priorities, dependencies and redundancies, and recommending process remediation or simplification.
8. Implementing information privacy best practices.

Core Skills and Experience:

1. 10+ years of experience in the following:
2. Demonstrated experience and competency to resolve complex issues, identify options, make recommendations, analyze policy proposals to assess / identify I&IT business implications and develop strategic policy planning options and impact analyses for clients.
3. Demonstrated experience and competency to acquire and apply relevant legislation, regulations and directives to ensure proposed initiatives conform to legislation, identify and evaluate emerging privacy issues, changes, and trends in current and future that impact government policy directions.
4. Experience in program analysis/evaluation techniques to assess the impact of proposed, or new/changed policies/fiscal or governance arrangements for new programs.
5. Demonstrated experience and competency to prepare comprehensive reports, options analyses, briefing materials and presentations and propose responses on privacy issues.
6. Experience in consultation and negotiation to gain support for policy and program initiatives.
7. Demonstrated experience and competency to develop effective relationships with senior management and stakeholders.
8. Strong oral and written communications and principles and methods, to draft papers, reports, options analyses, correspondence, briefing notes, speeches, and materials.

General Skills:

1. Demonstrated strong leadership and people management skills.
2. Exceptional analytical, trouble-shooting, problem solving, decision-making skills, presentation skills, interpersonal, verbal and written communication.
3. Proven troubleshooting and critical thinking experience.
4. Demonstrated ability to apply strong listening skills to facilitate issue resolution.
5. Effective consulting skills to engage with all stakeholders with proven track record for building strong working relationships.
6. Strong interpersonal, facilitation and negotiation skills with ability to build rapport with stakeholders and drive negotiations to a successful outcome.
7. Excellent customer service skills, including tact and diplomacy to ensure client needs are managed effectively.
8. A motivated, flexible, detail-oriented and creative team player with perseverance, excellent organization and multi-tasking abilities, and a proven track record for meeting strict deadlines.