RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Job Openings RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

About the job RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

Description

• Develop privacy impact assessments and review recommendations from the privacy impact assessment (PIA) of proposed solution and business processes
• Lead and provide technical expertise in the development of access and privacy tools to facilitate the development of implementation key strategy data and digital initiatives, implementation of security mechanisms pertaining to the creation, collection, storage, access, retrieval and disclosure of Personal Health Information (PHI)
• Engage and facilitate privacy related discussions with a wide range of business, IT, legal and privacy stakeholders across the ministry, and government agencies.
• Examine complex program, policy and information system proposals to assess and document business flow and context; perform stakeholder analysis, public/private partnerships, governance structures and feasibility in terms of the protection of Personal Health Information (PHI) collected and retained
• Support projects to ensure compliance with security and privacy best practices, such as the Personal Health Information Privacy Act (PHIPA) (2004)
• Provide technical and systems advice on legacy systems, internet tools and system interfaces, information, security, technical architecture and data flows to improve protection of Personal Health Information (PHI)
• Provide technical and systems advice on data flows to the ministry, and other stakeholders
• Develop business processes and procedures that describe information flows associated with new technologies, programs, policies or information systems to illustrate how and by whom Personal Health Information (PHI) will be collected, used, disclosed and retained
• Using system and infrastructure architectures, document physical and/or logical separation of Personal Health Information
• Identify, analyze and assess emerging and critical policy issues relating to Freedom of Information (FOI) and Protection of Privacy which may have an impact on PIA methodology
• Formulate policy proposals, recommendations, strategies and options for the project team and Ministry executive to address emerging issues
• Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies
• Assess existing regulations for potential changes required to support additional initiatives to provide greater access to PHI and determine impacts on existing data sharing/electronic health record (EHR) agreements/privacy frameworks/health information custodian (HIC) models.
• Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes
• Review the recommendations from the privacy impact assessment (PIA) of the proposed solution and business processes
• Provide advice to the Ministry as it relates to privacy policy and guidelines
• Coordinate across branches and develop communication materials such as briefing notes and presentations
• Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team
• Communicate with technical and business audiences and non-privacy experts

NOTE

Extension/Amendment Attestation: Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond the maximum contract value and any extension options included in the original SOW.

Assignment Type: This position is currently listed as "Hybrid" as consultants will be required to work partly in the physical workplace and partly remotely. The details of this arrangement will be at the Hiring Manager's discretion.

Technical Skills (50%)

• 10+ years of experience in privacy impact assessment methodologies, tools and techniques
• 10+ years of experience in application of threat and risk analysis principles, program analysis, business analysis
• 10+ years of experience in understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection
• 10+ years of experience in practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e. information management, knowledge management, intellectual property/copyright, information technology and electronic service delivery channels)
• 10+ years of experience in practical knowledge of broad political, legal, fiscal, social and governance dimensions to ensure tha