Privacy Analyst

Dasro is looking for Privacy Analyst - REMOTE for one of its clients in Regina, SKDuration: 24 months contract with the possibility of extensionLocation: Remote, Regina, SKResponsibilities include but not limited to:• Participate in core team meetings to ensure the privacy perspective remains prevalent throughout the course of all projects.• Solicit and elicit administrative, technical, and physical information from subject matter experts (SMEs).• Think critically about systems, legislative duties, safeguards, and access controls to protect personal information.• Review project approaches, procedures, policies, associated materials, and safeguards to provide SMEs input and observations.• Review and advise on implementations as needed.• Conduct comprehensive Privacy Impact Assessments:o Write reports.o Make recommendations.o Craft actionable and meaningful mitigation strategies.o Draft data flow diagrams.o Document legislative authority and/or consent.o Ensure accuracy.o Assemble supporting materials.o Identify data elements, their use, and purpose.o Evaluate retention schedules.o Ensure collection is limited.o Assess safeguards.• Revise PIAs prior to implementation.• Create addendums to PIAs after implementationMandatory qualifications:• 5+ years of experience in development and delivery of Privacy Impact Assessments and/or Privacy Assessments for technology solutions• Demonstrated working experience with Federal and Provincial privacy laws and requirements.• This could include, but not limited to, Saskatchewan’s Freedom of Information and Protection of Privacy Act or similar in another jurisdiction.Desired qualifications:• Demonstrated experience developing and delivering Privacy Impact Assessments at a Provincial and/or Federal government level in projects.• Demonstrated experience of performing research and analysis used to inform recommendations to advance privacy protection.• Demonstrated experience reviewing project initiatives to identify information access, privacy issues and opportunities (e.g., duplication of data, security, and privacy, enhance the quality and use of information within government).• Provide specific detailed examples.• Demonstrated experience reviewing project initiatives to identify information access, privacy issues and opportunities (e.g., duplication of data, security, and privacy, enhance the quality and use of information within government).• Provide specific detailed examples.• Demonstrated familiarity with criminal justice system, correctional settings, and applicable laws, inclusive to both adult and youth cases and custody.• Provide specific detailed examples.• Demonstrated experience successfully working in a multiple project environment with an ability to prioritize, meet deadlines, and work under pressure.• Demonstrated working experience with information security policies, standards, methods, and best practices.