Senior Privacy and Integrated Health Record Analyst

Senior Privacy and Integrated Health Record Analyst 1 day ago Be among the first 25 applicants Position Summary Reporting to the Director Integrated Quality, the Senior Privacy and Integrated Health Record Analyst is responsible for planning, providing guidance, interacting with key internal and external partners, executing, and participating in the execution of cross‑portfolio activities required to allow QH to maintain compliance with the Personal Health Information Protection Act, 2004 (PHIPA). The role will work closely with the Director Integrated Quality and other QH leaders and contributors, using project management expertise and privacy program experience to develop a multi‑year plan, strategy and cadence that ensures QH readiness for the continuous changes and challenges in the health care sector. This role will also review, update, and implement policies, practices and other mechanisms that address new PHIPA amendments and enhance QH's privacy governance, risk, compliance and reporting capabilities. The Analyst will build internal and external relationships, liaise extensively between privacy team members and portfolio/functional teams, including ISO, Analytics and Informatics, Product and EHR Data Management, Enterprise Risk and Compliance, and Legal Services, championing a culture of privacy at QH and enabling compliance with QH’s privacy requirements. Education and Experience Hold an undergraduate degree in law, business administration, public administration, or related disciplines, or equivalent education/experience with evidence of continuing professional development in privacy Certified Information Privacy Professional or other relevant privacy designation is an asset 5 years of relevant privacy, legal and/or compliance work experience, including 3 recent years focused in public sector healthcare privacy Experience with developing and/or leading privacy program and operational activities including for example, privacy breach management, training and awareness, auditing, and privacy risk management Experience designing and implementing processes, tools, forms, logs, and other mechanisms to support compliance activities, including the development of metrics, dashboards, and reports Experience leading working groups, projects or programs Knowledge and Skills Extensive knowledge of Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act, 2004 (PHIPA), privacy best practices and industry standards Broad understanding of privacy concepts, trends, legislative and regulatory requirements and/or emerging issues such as de‑identification, event auditing and monitoring, privacy maturity models, and their potential impacts on goals, priorities and activities within a privacy program Demonstrated ability to conceive, support and/or implement projects from start to finish while managing processes and expectations accordingly Proficient in Microsoft based work environment i.e. Word, PowerPoint, Excel, Teams Strong organizational skills and ability to establish and manage priorities with a superior commitment to follow‑through Excellent interpersonal skills with ability to build collaborative relationships with QH business teams Strong written communication skills, including the ability to draft policies, briefing notes, compliance assessments, etc. that involve technical privacy and compliance concepts Ability to effectively communicate, present and be comfortable speaking to QH senior executives, clinicians, external stakeholders and business teams on privacy compliance and risk management concepts. Duties Develop multi‑year plans, strategies, and cadence Plan privacy team projects and/or support the planning and execution of portfolio or functional team projects in response to IPC recommendations Lead the review, update, development, and implementation of privacy policies and supporting artefacts such as procedures, templates, and logs to meet compliance requirements and mature QH’s privacy program in accordance with evolving industry privacy standards and best practices Prepare and/or assist in the preparation of responses to any IPC comments, inquiries and/or recommendations received, often within time‑sensitive timelines Develop project management plans and support leaders, and employees across QH to ensure indicators are collected, logged and reported in accordance with QH’s information practices and IPC requirements within specific, time‑sensitive timelines Collaborate with members of the privacy team and other QH portfolios or functional teams (i.e. Information Security, Enterprise Risk Management, etc.) to ensure QH has integrated and harmonized information practices Act as the subject‑matter expert while coordinating and supporting the management, and execution of program and operational activities required to ensure QH’s compliance with IPC requirements, including but not limited to governance and accountability, privacy breach management, privacy risk management, and privacy training and awareness activities Develop privacy audit plans and conduct privacy audits across QH portfolios on an ongoing basis and/or as scheduled by privacy policies and procedures Lead and participate in privacy governance, risk and compliance activities, as required Monitor and stay current on relevant privacy, legal, technology and other matters that may impact IPC requirements and QH’s privacy program and risk posture Assist the organization to implement, sustain, monitor and improve a comprehensive privacy program in a complex healthcare environment Provide guidance, as a subject‑matter expert, to Digital Shared Services and/or Information Technology vendors on the design, maintenance and operation of electronic information systems containing personal health information (PHI) and personal information (PI) to ensure they are compliant with relevant privacy legislation Maintain strong listening skills and can draw out information by hearing what has been said/not said and understanding the underlying meaning behind the speaker’s words and behavior Represent Quinte Privacy on various regional committees and working groups Physical Demands Analysis Strength Required Rarely – lifting average 5‑10 pounds maximum 15 pounds, carrying, pushing/pulling Mobility Required Often – prolonged sitting, and Required Occasionally – standing and walking on hard surfaces, bending/stooping Dexterity Required Often – prolonged fine finger movements Required Frequently – gripping/grasping, eye/hand coordination Required Briefly – reaching with both hands Equal Opportunity We thank all interested candidates for their response, however, only those chosen for an interview will be contacted. Quinte Health is an equal opportunity employer committed to meeting needs under the Canadian Charter of Rights and Freedom and the Ontario Human Rights Code. Our Recruitment process follows the Accessibility for Ontarians with Disabilities Act in order to provide a fair and equitable process for all candidates. Applicants requiring accommodation through the recruitment/interview process are encouraged to contact the Human Resources Department at 613‑969‑7400 x2577. Seniority level Mid‑Senior level Employment type Full‑time Job function Administrative #J-18808-Ljbffr