Privacy and Access Analyst — Vancouver BC

The BC College of Nurses and Midwives is hiring a Privacy and Access Analyst to be an integral part of the Information Management team.

Does this sound like you?

You are passionate about privacy and information access related legislation and are on top of the latest privacy industry standards and regulations. You have demonstrated experience in implementing and managing cross-functional privacy projects and programs. You have noteworthy critical thinking, communication, and interpersonal skills, and the proven ability to build meaningful relationships with multiple stakeholders.

Status:Temporary, Full-Time (18-months)
Number of Positions:1
Work Location:Hybrid (a combination of in-office in Vancouver and remote work)

What we offer you

Our office is located at 200 Granville Street in Downtown Vancouver. To support a healthy work-life balance, we operate using a hybrid model. Employees enjoy a collaborative environment that offers flexibility to work both on-site and remotely each week.

As a member of the team, you can expect to be working in a collaborative, team-based environment, and treated in a respectful and professional manner. BCCNM is committed to employee professional development and career growth. We promise to provide you with rewarding work that challenges you. While your workload will be busy, the college supports staff in achieving a healthy work-life balance.

Aside from the opportunity to be part of a passionate team contributing to our important mandate of protecting the public, BCCNM offers an attractive compensation and benefits package for employees that includes generous annual vacation, 100% company-paid group health and dental benefits, participation in the Municipal Pension Plan, along with many other programs designed to promote employee health and well-being.

What you'll be doing

Reporting to the Director, Information Management and under the direction of the Senior Privacy Consultant, the PPA operationalizes and facilitates BCCNM's privacy management program and supports Freedom of Information (FOI) requests in accordance with relevant legislation (Freedom of Information and Protection of Privacy Act (FIPPA)) and policies. The PPA identifies opportunities to improve processes relating to the collection, processing, storage, and disclosure of personal information to enable BCCNM to carry out its mandate and business activities.

Working with the data owners across multiple teams, the PPA ensures BCCNM is compliant with applicable legislation, regulations, and government guidance, and to implement privacy and access to information program level activities. The PPA coordinates BCCNM's information governance framework through the management and protection of personal information, including the introduction of change management initiatives. Additionally, the PPA promotes privacy awareness and communicates changes to privacy expectations as they may become relevant to BCCNM.

Key responsibilities include:

• Designs, develops, and implements privacy compliance programs. Educates internal stakeholders on awareness of privacy trends and changes in technology use and privacy legislation that impact BCCNM.
• Collaborates with internal and external stakeholders on programs and projects which may involve the handling and sharing of information across BCCNM and with other organizations, users, clients, suppliers, and partners to ensure the protection of personal information of registrants and staff.
• Escalates to the Privacy Office and works in consultation with relevant stakeholders in relation to defining BCCNM's protection goals and applying and operationalize these goals with business process owners.
• Analyses and proposes development and implements organization-wide privacy policies and procedures.
• Ensures clarity on what the College sees as FOI requests, and designs college-wide processes and training so that FOI requests are centrally tracked and responded to as expected.
• Manages and responds to the College's FOI requests, including conducting redaction of records.
• Collaborates with staff, IT security and IM risk assessment to maintain organizational compliance with provincial laws regarding privacy, freedom of information, security, electronic transactions, and protection of information assets.
• Completes privacy impact assessments (PIAs), supports the completion of risk assessments, and conducts related ongoing compliance monitoring activities in consultation with IT security and IM risk assessment and contract resources in the Privacy Office.
• Provides effective and timely response to privacy breaches in accordance with the College's privacy breach incident response plan and takes the necessary steps to contain the breach.
• 3 to 5 years' experience in a privacy and access to information role, including successful implementation and management of all aspects of cross-functional privacy projects/programs.
• Certification as an Information Privacy Professional (CIPM, CIPP/C or CIPT) is an asset.
• Knowledge of BC's Freedom of Information and Protection of Privacy Act and Health Professions Act.
• Experience completing PIAs and developing related processes.
• Understanding of common privacy industry standards and regulations and experience with industry frameworks.
• Experience working on privacy focused projects such as Privacy-by-Design, privacy enhancing technologies.
• Experience supporting business understanding and maintaining compliance with privacy laws as well as privacy and information governance policy.
• Ability to communicate effectively with stakeholders, internal and external, about privacy requirements and processes relating to freedom of information requests.
• Ability to exercise discretion and diplomacy in handling confidential information while working effectively with different groups of stakeholders including internal stakeholders within the College and external stakeholders involving requestors who file FOI requests and other health profession regulators.
• Strong communications and interpersonal skills, collaboration, and critical thinking/problem solving abilities.
• Advanced proficiency using MS Office suite including Visio. Working level knowledge of MS CRM Dynamics and MS SharePoint.
• Knowledge of cloud computing technologies and its impact on data privacy.
• Outstanding organizational skills and attention to detail.
• Privacy and FOI experience in a public body is an asset.
• Demonstrated understanding of diversity, inclusion, and cultural humility and health care is an asset.

How to apply

If you are interested in this position, please apply through this link . This opportunity will remain posted until filled. To see a full list of our current opportunities or to learn more about working at the BC College of Nurses & Midwives, please visit our website at Careers at BCCNM .

Please note:BCCNM is committed to providing a safe and healthy environment for all College staff. Any employee hired must be fully vaccinated against COVID-19 or must have a BCCNM approved exemption before beginning work for the College.

About the BC College of Nurses & Midwives

The British Columbia College of Nurses & Midwives ("BCCNM") is the college empowered under the Health Professions Act to regulate the practice of all licensed practical nurses, nurse practitioners, registered midwives, registered nurses, andregistered psychiatric nurses in British Columbia. Regulation helps to protect the public by ensuring that professional care or service received by the public is competent, ethical, and meets the standards that society views as acceptable.

As western Canada's largest health profession regulator, we believe a diverse and inclusive team enriches our efforts to protect the public. We welcome applications from all who reflect of the communities we serve, and especially encourage Indigenous Peoples and members of equity-seeking groups to apply. We believe diverse perspectives and experiences bring both innovation and better outcomes to the work we do and the decisions we make.