Senior Privacy and Integrated Health Record Analyst

Senior Privacy and Integrated Health Record Analyst Reporting to the Director Integrated Quality, the Senior Privacy and Integrated Health Record Analyst is responsible for planning, providing guidance, interacting with key internal and external partners, and executing cross‑portfolio activities required to allow QH to maintain compliance with the Personal Health Information Protection Act, 2004 (PHIPA). This role will work closely with the Director Integrated Quality and other QH leaders and contributors. Using project‑management expertise, privacy programme and operational experience, and knowledge of privacy legal and regulatory requirements, the analyst will develop a multi‑year plan, strategy, and cadence to ensure QH readiness for the continuous changes and challenges in the health‑care sector. The role will also review, update, and implement policies, practices and other mechanisms that address any new PHIPA amendments, and enhance QH’s privacy governance, risk, compliance and reporting capabilities. Responsibilities Develop multi‑year plans, strategies, and cadence. Plan privacy team projects and support the planning and execution of portfolio or functional team projects in response to IPC recommendations. Lead the review, update, development, and implementation of privacy policies and supporting artefacts such as procedures, templates, and logs required to meet compliance requirements and mature QH’s privacy programme. Prepare and/or assist in the preparation of responses to IPC comments, inquiries and/or recommendations received, often within time‑sensitive timelines. Develop project‑management plans and support leaders and employees across QH to ensure indicators are collected, logged and reported in accordance with QH’s information practices and IPC requirements within specific, and time‑sensitive timelines. Collaborate with members of the privacy team and other QH portfolios or functional teams (e.g., Information Security, Enterprise Risk Management) to ensure QH has integrated and harmonised information practices. Act as the subject‑matter expert coordinating and supporting the management and execution of programme and operational activities required to ensure QH’s compliance with IPC requirements, including governance and accountability, privacy breach management, privacy risk management, and privacy training and awareness activities. Develop privacy audit plans and conduct privacy audits across QH portfolios on an ongoing basis and/or as scheduled by privacy policies and procedures. Lead and participate in privacy governance, risk and compliance activities, as required. Monitor and stay current on relevant privacy, legal, technology and other matters that may impact IPC requirements and QH’s privacy programme and risk posture. Assist the organization to implement, sustain, monitor and improve a comprehensive privacy programme in a complex healthcare environment. Provide guidance, as a subject‑matter expert, to Digital Shared Services and/or Information Technology vendors on the design, maintenance, and operation of electronic information systems containing personal health information (PHI) and personal information (PI) to ensure compliance with relevant privacy legislation. Maintain strong listening skills and ability to draw out information from what has been said or not said and understand underlying meanings. Represent Quinte Health on various regional committees and working groups. Education & Experience Hold an undergraduate degree in law, business administration, public administration, or related disciplines, or equivalent education/experience with evidence of continuing professional development in privacy. Certified Information Privacy Professional or other relevant privacy designation is an asset. Five years of relevant privacy, legal and/or compliance work experience, including three recent years focused in public sector healthcare privacy. Experience with developing and/or leading privacy programme and operational activities, including privacy breach management, training and awareness, auditing, and privacy risk management. Experience designing and implementing processes, tools, forms, logs, and other mechanisms to support compliance activities, including the development of metrics, dashboards, and reports. Experience leading working groups, projects or programmes. Knowledge and Skills Extensive knowledge of Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act, 2004 (PHIPA), privacy best practices and industry standards. Broad understanding of privacy concepts, trends, legislative and regulatory requirements and/or other emerging issues (such as de‑identification, event auditing and monitoring, privacy maturity models) and their potential impacts on goals, priorities and activities within a privacy programme. Demonstrated ability to conceive, support and/or implement projects from start to finish while managing processes and expectations accordingly. Proficient in Microsoft‑based work environment (Word, PowerPoint, Excel, Teams). Strong organisational skills and the ability to establish and manage priorities with a superior commitment to follow‑through. Excellent interpersonal skills with the ability to build collaborative relationships with QH business teams. Strong written communication skills, including the ability to draft policies, briefing notes, compliance assessments, etc. that involve technical privacy and compliance concepts. Ability to effectively communicate, present and be comfortable speaking to QH senior executives, clinicians, external stakeholders and business teams on privacy compliance and risk‑management concepts. Physical Demands Requirement: Rarely – lifting an average of 5–10 pounds, maximum 15 pounds, carrying, pushing/pulling. Requirement: Often – prolonged sitting. Requirement: Occasionally – standing and walking on hard surfaces, bending/stooping. Requirement: Often – prolonged fine finger movements. Requirement: Frequently – gripping/grasping, eye/hand coordination. Requirement: Briefly – reaching with both hands. Equal Opportunity Quinte Health is an equal‑opportunity employer committed to meeting the needs under the Canadian Charter of Rights and Freedom and the Ontario Human Rights Code. Our recruitment process follows the Accessibility for Ontarians with Disabilities Act to provide a fair and equitable process for all candidates. Applicants requiring accommodation through the recruitment/interview process are encouraged to contact the Human Resources Department at 613‑969‑7400 x2577. Additional Information Referrals increase your chances of interviewing at Quinte Health by 2x. #J-18808-Ljbffr