RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior Posted 1 day ago. Be among the first 25 applicants. Client: Ministry of Health Work Location: 222 Jarvis Street, Toronto, Ontario Work Arrangement: Hybrid Estimated Start Date: 2025-07-01 Estimated End Date: 2026-03-31 Business Days: 208 Extension: Probable after the initial mandate Hours per day: 7.25 hours per day Security Level: CRJMC Responsibilities Develop privacy impact assessments and review recommendations from the privacy impact assessment (PIA) of proposed solution and business processes Lead and provide technical expertise in the development of access and privacy tools to facilitate the implementation of key string data and digital initiatives, implementation of security mechanisms pertaining to the creation, collection, storage, access, retrieval and disclosure of Personal Health Information (PHI) Engage and facilitate privacy‑related discussions with a wide range of business, IT, legal and privacy stakeholders across the ministry and government agencies Examine complex program, policy and information system proposals to assess and document business flow and context; perform stakeholder analysis, public/private partnerships, governance structures and feasibility in terms of the protection of PHI collected and retained Support projects to ensure compliance with security and privacy best practices, such as the Personal Health Information Privacy Act (PHIPA) (2004) Provide technical and systems advice on legacy systems, internet tools and system interfaces, information, security, technical architecture and data flows to improve protection of PHI Provide technical and systems advice on data flows to the ministry and other stakeholders Develop business processes and procedures that describe information flows associated with new technologies, programs, policies or information systems to illustrate how and by whom PHI will be collected, used, disclosed and retained Using system and infrastructure architectures, document physical and/or logical separation of PHI or security mechanisms that prevent improper access to PHI or maintain any required separation Provide privacy expertise, consultation and support to project team members, senior management and colleagues in MOH advising on legislation and regulations, in an effort to resolve potential legal or privacy problems Provide analysis and advice to ministries and clusters regarding the Freedom of Information Act (FOI) and privacy implications, privacy and security concepts, of new information technologies and information systems, and assist institutions in documenting their analysis Recommend mitigation strategies and privacy‑enhancing technologies in accordance with PIA procedures Identify, analyze and assess emerging and critical policy issues relating to FOI and Protection of Privacy which may have an impact on PIA methodology Formulate policy proposals, recommendations, strategies and options for the project team and Ministry executive to address emerging issues Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups or similar governance bodies Assess existing regulations for potential changes required to support additional initiatives to provide greater access to PHI and determine impacts on existing data sharing/electronic health record (EHR) agreements, privacy frameworks and health information custodian (HIC) models Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes Review the recommendations from the PIA of the proposed solution and business processes Provide advice to the Ministry as it relates to privacy policy and guidelines Coordinate across branches and develop communication materials such as briefing notes and presentations Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team Communicate with technical and business audiences and non‑privacy experts Technical Skills (50%) 10+ years of experience in privacy impact assessment methodologies, tools and techniques Application of threat and risk analysis principles, program analysis and business analysis Understanding of policy development for creating options and strategies on information management and privacy protection Practical knowledge of IT concepts and processes impacting personal information protection (information management, knowledge management, intellectual property/copyright, IT and electronic service delivery channels) Practical knowledge of political, legal, fiscal, social and governance dimensions ensuring privacy principles and directives are applied in new program development Managing privacy risks in the collection, use and disclosure of PHI Leading end‑to‑end operational risk assessments, selecting methodologies, identifying compliance gaps and recommending remediation or simplification Implementing information privacy best practices Core Skills and Experience (35%) 10+ years of experience resolving complex issues, identifying options and making recommendations Experience analyzing policy proposals to assess I&IT business implications and developing strategic policy options Experience applying legislation, regulations and directives to ensure initiatives conform to legal requirements Experience identifying and evaluating emerging privacy issues and trends impacting government policy Experience using program analysis/evaluation techniques to assess policy and governance impacts Experience preparing comprehensive reports, briefing materials and presentations on privacy issues Experience in consultation and negotiation to gain support for policy and program initiatives Ability to develop effective relationships with senior management and stakeholders Strong oral and written communication skills for drafting papers, reports, correspondence and briefing notes General Skills (10%) Strong leadership and people management skills Exceptional analytical, troubleshooting, problem‑solving and decision‑making skills Strong interpersonal, verbal and written communication and presentation skills Proven troubleshooting and critical thinking experience Strong listening skills to facilitate issue resolution Effective consulting skills with a proven track record of building strong stakeholder relationships Strong facilitation and negotiation skills to drive successful outcomes Excellent customer service skills, tact and diplomacy Motivated, flexible, detail‑oriented and creative team player with strong organizational and multitasking abilities Proven record of meeting strict deadlines Public Sector Experience (5%) 5+ years of experience with federal, provincial or broader public‑sector healthcare providers Familiarity with IPC privacy and de‑identification guidelines, Government of Ontario IT Standards (GO‑ITS) and public sector corporate policies on privacy and record keeping Knowledge of Public Sector Enterprise Architecture artifacts, processes and documentation standards Knowledge of Project Management Institute (PMI) standards Knowledge of Public Sector I&IT project management methodologies Experience with Public Sector or broader public‑sector health‑related projects Understanding of Ministry policy and IT project approval processes Experience with Public Sector Unified I&IT Project Methodology, Enterprise Architecture, Gating process and standard systems development methodologies Experience with large, complex IT health‑related projects Knowledge of GO‑ITS Digital Health standards and internal branch standards Note This position is currently listed as Hybrid as consultants will be required to work partly in the physical workplace and partly remotely. The details of this arrangement will be at the Hiring Manager's discretion. Extension/Amendment Attestation Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond the maximum contract value and any extension options included in the original SOW. Eligibility and Application Steps If you are enthusiastic about this opportunity, please provide the following documents. Updated resume in Word format (Mandatory) Skills matrix and references (Mandatory) Expected hourly rate (Mandatory) Visa status (Mandatory) LinkedIn ID (Mandatory) Without mandatory documents, we cannot submit a candidate. Please only apply if you meet the qualifications mentioned above. Feel free to share with your network or tag someone who fits for this role For questions or clarification, call or text (647) 408‑1348 or email hrsmss@smsoftconsulting.com. #J-18808-Ljbffr