RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Company : S M Software Solutions

Job Type : Contract

Toronto, On

Number of Applicants

000+

Let AI Supercharge Your Job Hunt!

JobCopilot scans 500,000+ company career sites daily to find jobs for you

Never miss an opportunity Save hours by auto-filling applications forms Land more interviews with tailored applications

Activate JobCopilot

Job Description - RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Job Title: RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior
Client: Ministry of Health
Work Location: 222 Jarvis Street, Toronto, Ontario, Hybrid
Estimated Start Date: 2025-07-01
Estimated End Date: 2026-03-31
#Business Days: 208.00
Extension: Probable after the initial mandate
Hours per day or Week: 7.25 hours per day
Security Level: CRJMC
Must haves:
10+ years of experience in the following:

Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection
Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI)
Demonstrated experience and competency to identify and evaluate emerging privacy issues, changes, and trends in current and future that impact government policy directions
Demonstrated experience and competency to prepare comprehensive reports, options analyses, briefing materials and presentations and propose responses on privacy issues

Description

Develop privacy impact assessments and review recommendations from the privacy impact assessment (PIA) of proposed solution and business processes
Lead and provide technical expertise in the development of access and privacy tools to facilitate the development of implementation key strategy data and digital initiatives, implementation of security mechanisms pertaining to the creation, collection, storage, access, retrieval and disclosure of Personal Health Information (PHI)
Engage and facilitate privacy related discussions with a wide range of business, IT, legal and privacy stakeholders across the ministry, and government agencies.
Examine complex program, policy and information system proposals to assess and document business flow and context; perform stakeholder analysis, public/private partnerships, governance structures and feasibility in terms of the protection of Personal Health Information (PHI) collected and retained
Support projects to ensure compliance with security and privacy best practices, such as the Personal Health Information Privacy Act (PHIPA) (2004)
Provide technical and systems advice on legacy systems, internet tools and system interfaces, information, security, technical architecture and data flows to improve protection of Personal Health Information (PHI)
Provide technical and systems advice on data flows to the ministry, and other stakeholders
Develop business processes and procedures that describe information flows associated with new technologies, programs, policies or information systems to illustrate how and by whom Personal Health Information (PHI) will be collected, used, disclosed and retained
Using system and infrastructure architectures, document physical and/or logical separation of Personal Health Information
(PHI) or security mechanisms that prevent improper access to Personal Health Information (PHI) or maintain any required separation
Provide privacy expertise, consultation, and support to project team members, senior management and colleagues in MOH advising on the legislation and regulations, in an effort to resolve potential legal or privacy problems
Provide analysis and advice to ministries and clusters regarding the Freedom of Information Act (FOI) and privacy implications, privacy and security concepts, of new information technologies and information systems, and assist institutions in documenting their analysis
Recommend mitigation strategies and privacy enhancing technologies in accordance with Privacy Impact Assessment (PIA) procedures
Identify, analyze and assess emerging and critical policy issues relating to Freedom of Information (FOI) and Protection of Privacy which may have an impact on PIA methodology
Formulate policy proposals, recommendations, strategies and options for the project team and Ministry executive to address emerging issues
Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies.
Assess existing regulations for potential changes required to support additional initiatives to provide greater access to PHI and determine impacts on existing data sharing/electronic health record (EHR) agreements/privacy frameworks/health information custodian (HIC) models.
Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes.
Review the recommendations from the privacy impact assessment (PIA) of the proposed solution and business processes.
Provide advice to the Ministry as it relates to privacy policy and guidelines.
Coordinate across branches and develop communication materials such as briefing notes and presentations. 
Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team.
Communicate with technical and business audiences and non-privacy experts.
Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies
Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies.

Experience and Skill Set Requirements

Technical Skills	10+ years of experience in the following: Privacy impact assessment methodologies, tools and techniques Application of threat and risk analysis principles, program analysis, business analysis Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection Practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e. information management, knowledge management, intellectual property/copyright, information technology and electronic service delivery channels) Practical knowledge of broad political, legal, fiscal, social and governance dimensions to ensure that privacy principles, directives, notices and directions are considered in the development of new programs/initiatives Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI) Leading end-to-end operational risk assessments, selecting risk methodologies, identifying privacy compliance gaps, priorities, dependencies and redundancies, and recommending process remediation or simplification Implementing information privacy best practices.	50%
Core Skills and Experience	10+ years of experience in the following: Demonstrated experience and competency to resolve complex issues, identify options and make recommendations Demonstrated experience and competency to analyze policy proposals to assess / identify I&IT business implications and develop strategic policy planning options and impact analyses for clients Demonstrated experience and competency to acquire and apply relevant legislation, regulations and directives to ensure proposed initiatives conform to legislation Demonstrated experience and competency to identify and evaluate emerging privacy issues, changes, and trends in current and future that impact government policy directions Experience in program analysis/evaluation techniques to assess the impact of proposed, or new/changed policies/fiscal or governance arrangements for new programs Demonstrated experience and competency to prepare comprehensive reports, options analyses, briefing materials and presentations and propose responses on privacy issues Experience in consultation and negotiation to gain support for policy and program initiatives Demonstrated experience and competency to develop effective relationships with senior management and stakeholders Strong oral and written communications and principles and methods, to draft papers, reports, options analyses, correspondence, briefing notes, speeches, and materials.	35%
General Skills	Demonstrated strong leadership and people management skills Exceptional analytical, trouble-shooting, problem solving and decision-making skills Demonstrated strong interpersonal, verbal and written communication, and presentation skills Proven troubleshooting and critical thinking experience Demonstrated ability to apply strong listening skills to facilitate issue resolution Effective consulting skills to engage with all stakeholders with proven track record for building strong working relationships Strong interpersonal, facilitation and negotiation skills with ability to build rapport with stakeholders and drive negotiations to a successful outcome Excellent customer service skills, including tact and diplomacy to ensure client needs are managed effectively A motivated, flexible, detail-oriented and creative team player with perseverance, excellent organization and multi-tasking abilities, and a proven track record for meeting strict deadlines	10%
Public sector Experience	5+ years of experience working with federal/provincial/broader public-sector healthcare providers Previous Public Sector experience and familiarity with the privacy and de-identification guidelines set by IPC, Government of Ontario IT Standard (GO-ITS), Public Sector Corporate Policy on Protection of Personal Information, and Public Sector Corporate Policy on Record Keeping Knowledge of Public Sector Enterprise Architecture artifacts (or similar), processes and practices, and ability to produce technical documentation that comply with industry standard practices In-depth knowledge of industry standard such as Project Management Institute (PMI) Knowledge of Public Sector I&IT project management methodologies Knowledge and experience with Public Sector or Broader Public-Sector health related projects Knowledge and understanding of Ministry policy and IT project approval processes and requirements Experience adopting and adhering to Public Sector Unified I&IT Project Methodology, Public Sector Enterprise Architecture and Public Sector Gating process, and Public Sector Standard Systems Development Methodologies Experience with large complex IT Health-related projects Experience with GO-ITS Digital Health standards, and internal branch standards would be an asset.	5%

Original job RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.

Auto-Apply to Similar Jobs

Share Job

Get your Resume Reviewed for Free

Automate Job Applications for Similar Jobs

Auto-Apply to Privacy Impact Assessment (PIA) Specialist Jobs with your AI JobCopilot

Auto-Apply with AI

Similar Privacy Impact Assessment (PIA) Specialist Jobs in Canada

Get your Resume Reviewed for Free

Email address

Why are you reporting this job?

I think it’s a discriminatory or offensive

I think it’s fraudulent or a scam

I think it’s trying to sell something unrelated to the job / it’s asking for money

I think it contains incorrect or broken information

Other

All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.

Setup your job alert:

Frequency

By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime. Skip

RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Job Description - RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Similar Privacy Impact Assessment (PIA) Specialist Jobs in Canada

Mobile Apps