Privacy Impact Assessment

on behalf of our client on Public Sector. we are looking for contract **Privacy Impact Assessment (PIA) Specialist**

**Duration**: 12 months

**Work Mode: Hybrid, once every two weeks**

Description

**Must haves**:

- Minimum of 3 years’ health privacy experience conducting privacy impact assessments (PIAs) on medium to high complexity projects
- Minimum 5 years’ direct operational level privacy experience preferably in a health sector and/or IT environment
- Minimum 5 years' experience drafting and reviewing privacy requirements for data sharing agreements
- Minimum 5 years’ experience developing privacy policies and procedures, requirements, or controls
- Familiarity with the Personal Health Information Protection Act (PHIPA), and its related requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP)
- Familiarity with Application Programming Interface (API) functionality and management
- Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows
- Certifications like Certified Information Privacy Professional (CIPP) an asset.
- Experience in the Ontario health care sector and public service, with existing positive relationships an asset.
- Excellent Communication skills both verbal and written, and strong stakeholder engagement skills.
- Past experience with jurisdictional public health programs (example: Immunizations) will be of significant benefit.
- Past experience working with the Panorama, will be of additional benefit.
- Demonstrated experience managing projects or programs in Matrix organizational environments.

**Responsibilities**:
The Privacy Specialist is responsible for the delivery of the privacy and authorities analysis, including management of issues and risks to ensure successful and on-time completion of deliverable.
- Gather and develop requirements in order to create and maintain the privacy and authorities analysis
- Articulate and prioritize issues and risks and recommends mitigation strategies for decision makers
- Conducting/Completing Privacy Impact Assessments and associated documentation
- Providing Privacy Consultation on a diverse range of complex, multi-stakeholder health privacy issues and Information Technology (IT) initiatives
- Identify and assess privacy risks, including developing risk mitigation plans
- Create or inform the creation of data flow diagrams and associated privacy controls and compliance requirements
- Reviewing and advising on agreements, including data sharing agreements
- Developing privacy requirements for new or changing components
- Providing privacy advisory and support to the product team

**Desired Skills**:

- Expert knowledge of privacy policies and legislative processes - Health Protection and Promotion Act (HPPA), Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act (PHIPA) and associated Health Information Custodian (HIC) requirements.
- Knowledge of immunization workflows and associated authorities models will be of significant benefit.
- Certifications like Certified Information Privacy Professional (CIPP) an asset.
- Project Management, or related professional designation (PMP) an asset.
- Excellent Communication skills both verbal and written, and strong stakeholder engagement skills.
- Knowledge of Ontario’s electronic health record (EHR) and the Prescribed Organization (PO) designation.
- Past experience with jurisdictional public health programs (example: Immunizations) will be of significant benefit.

**Job Type**: Fixed term contract
Contract length: 12 months

Pay: From $105.00 per hour

Schedule:

- 8 hour shift
- Day shift
- No weekends

Work Location: Hybrid remote in Toronto, ON M5G 2L3

Application deadline: 2025-01-27
Expected start date: 2025-02-08