Privacy Impact Assessments PIA Specialist

Requisition: RQ00074

Supplier Assignment: RQ00074 Senior Privacy Specialist

Account: Supply Ontario

Start Date:

End Date:

Business Days: 256.00

Job Title: Senior Privacy Specialist

Office Location: 200 Front St West Toronto

Assignment Type: Hybrid

The candidate needs to go to the office when required.

Notes from the Hiring Manager:

• This role will require contractors to come onsite for occasional meetings.
• Previous experience writing PIA assessments is the most crucial aspect of this role.
• Experience with international regulations for data and privacy is preferred.
• Experience with Public Sectors is preferred.

Description

About Supply Ontario:

Supply Ontario is a new centralized procurement agency that enables a holistic government approach to purchasing goods and services. At Supply Ontario we believe that modernizing procurement is a key driver of success for Ontarios public sector. Our mandate is to strengthen supply chain management and procurement across the public sector ensuring that Ontario ministries provincial agencies hospitals school boards childrens aid societies and more have access to highquality timely reliable products at the best value.

As we stand up this new agency we are looking for FeeforService (FFS) resources to help support our organizations privacy program that will enable Supply Ontario to deliver on its mandate.

Project Overview:

Supply Ontario is committed to maintaining the highest standards of privacy and data protection. Our agency prides itself on our commitment to ethical practices and compliance with privacy laws regulations and best practices. As we continue to grow and innovate we are seeking a highly skilled Senior Privacy Specialist to join our dynamic team.

Our primary goal revolves around innovating a mature privacy program that underpins Supply Ontarios core business functions. Focusing on continuous improvement key objectives include adherence to applicable privacy laws & regulations supporting a mature privacy model and supporting risk management processes within the organization.

An extensive privacy model will include areas such as Privacy Impact Assessments (PIA) Privacy Policy & Procedure Development Privacy Training & Education and Privacy Subject Matter Expertise (SME). Through the utilization of cuttingedge technology and industry best practices we are dedicated to innovating our comprehensive privacy strategy within our agency.

Experience Required:

• 7 years of robust experience related to privacy supporting privacy policy privacy impact assessments (PIA) privacy investigations privacy training & education and providing privacy subject matter expertise.
• Experience in conducting Privacy Impact Assessments.
• Familiar with risk management and ability to understand policies and provide guidance on related matters.
• Involvement in privacy compliance or data function with experience in data protection activities such as records of processing activities records management and subject access requests.
• Indepth knowledge and experience with privacy laws legislations regulations and best practices. This includes but is not limited to: FIPPA PHIPA PIPEDA CASL GDPR etc.
• Excellent knowledge of privacy and security concepts trends and issues. This includes an understanding of impacts on business processes.
• Skilled in interpreting and communicating privacy principles and compliance requirements.
• Experience in researching and applying relevant information privacy laws regulations jurisprudence (particularly as it relates to the Information and Privacy Commissioner of Ontario) and risk countermeasures.
• Knowledge and experience with privacy enhancing best practices.
• Experience in developing and deploying privacy training and awareness campaigns across organizations.
• Strong interpersonal capabilities to effectively liaise with stakeholders ranging from technical teams to senior executives within the organization. Adeptness in understanding managing and aligning stakeholder expectations.
• Demonstrated experience in developing and maintaining comprehensive documentation. Strong technical and business writing capabilities.
• Agile responsiveness to evolving project dynamics ability to pivot strategies based on emerging challenges or changes in project requirements.
• Solid experience in fostering and managing relationships with external vendors and ensuring optimal service levels and performance benchmarks are met.
• Exceptional written and oral communication skills proficient in translating intricate technical details into clear comprehensible insights for stakeholders irrespective of their technical aptitude.

Deliverables:

The Senior Privacy Specialist is expected to play a pivotal role in the successful execution and maintenance of privacy within the organization. Their responsibilities and expectations encompass the following:

• Conduct regular privacy impact assessments to identify potential privacy issues and risks to protect sensitive information.
• Define evaluate and assess privacy requirements for organizational projects.
• Support a privacy model tailored to the organizations specific needs and regulatory requirements.
• Support and maintain privacy policies procedures and guidelines that align with applicable laws regulations and industry best practices and standards.
• Support the organization complies with all relevant privacy regulations and standards. Eliminate the risks of noncompliance with legislation corporate policies and best practices. Report on findings and deliver recommended advice.
• Support privacy training and awareness programs to educate employees.
• Support and promote compliance with internal policies and processes related to data protection & records and information retention & disposition.
• Generate regular reports and documentation on the privacy programs status risks and compliance.
• Support the incorporation of privacy measures in the development of systems & processes.
• Support privacy projects and tasks within the agency as assigned.

Desirable Qualifications:

• Educational Background: A bachelors degree in Information Technology Computer Science or related disciplines.
• Relevant professional certifications such as Certified Information Privacy Professional/Canada (CIPP/C).