Privacy Impact Assessment (PIA) Specialist Senior

Job Title: Privacy Impact Assessment (PIA) Specialist - Senior
Location: Toronto Ontario
Work Model: Onsite

Description / Responsibilities / Skills

Must Have

Experienced in privacy legislation including Freedom of Information and Protection of Privacy Act FIPPA Personal Health Information Protection Act PHIPA and Personal Information Protection and Electronic Documents Act PIPEDA

Experienced in conducting privacy assessments involving personal information

Experienced in leading and conducting privacy assessments involving digital or online solutionsLead and conducted assessments involving personal health information with third party solutions or service integration providers

Description

Responsibilities

• Lead or support development of Privacy Impact Assessments
• Evaluate compliance with legal and policy privacy requirements
• Identify and mitigate privacy risks
• Ensure compliance with provincial federal and private sector privacy legislation
• Align solutions with OPS policies directives standards and guidelines
• Apply Fair Information Practices principles

General Skills

• Strong knowledge of privacy and security concepts and trends
• Experience researching and applying privacy laws and regulations
• Experience conducting Privacy Impact Assessments in public sector
• Knowledge of privacy best practices and compliance standards
• Knowledge of FIPPA MFIPPA PHIPA PIPEDA and related regulations
• Familiarity with OPS PIA processes and tools
• Understanding of IT security system design business architecture and policy development
• Ability to lead and manage PIA development with stakeholder engagement
• Ability to create and interpret data flow diagrams and process models
• Strong communication skills with both technical and business audiences

Technology and Systems Knowledge

• Understanding of IT concepts impacting protection of personal information
• Knowledge of system interfaces security and data flows
• Ability to assess privacy implications of technologies and business initiatives

Information and Record Management

• Experience developing risk assessment tools and methodologies
• Knowledge of records management practices including retention and classification
• Knowledge of AODA standards

Desirable Skills

• Professional certifications in security or architecture
• Experience delivering privacy training and awareness
• Knowledge of Ontario government policies and procedures

Skills

Experience and Skill Set Requirements

Privacy Assessment Experience Policy and Legislative 40 percent

• Experience with FIPPA PHIPA PIPEDA legislation
• Experience conducting privacy assessments involving personal information
• Experience leading assessments for digital and online solutions
• Experience conducting assessments involving personal health information and third party systems
• Experience working with policy teams and evaluating legislation

Technical Understanding 30 percent

• Experience identifying privacy risks across platforms
• Knowledge of security and encryption approaches
• Experience with API integrations and backend systems
• Experience with privacy risks in legacy and cloud systems
• Knowledge of cloud data protection practices
• Understanding of privacy standards and architecture principles

Leadership and Communication 20 percent

• Strong stakeholder engagement and facilitation skills
• Ability to interpret technical and non technical documentation
• Strong documentation and reporting skills
• Ability to present findings and recommendations to executives
• Ability to manage multiple priorities

Digital Identity Frameworks 5 percent

• Experience with digital identity trust frameworks

Public Sector Experience 5 percent

• Experience conducting PIAs in OPS environment
• Knowledge of OPS processes templates and approvals