Manager, Privacy

At Ontario Health, we are committed to developing a strong organizational culture that connects and inspires all team members across the province. Our vision is that together, we will be a leader in health and wellness for all. Our mission is to connect the health system to drive improved and equitable health outcomes, experiences and value. How we work together is reflected through our five values: integrity, inspiration, tenacity, humility and care.

What Ontario Health offers:

- Achieving your career goals is a priority to us. Benefits of working at Ontario Health may include the following based on employment type:
Fully paid medical, dental and vision coverage from your first day- Health care spending account- Premium defined benefit pension plan- 3 personal days and 2 float days annually- Individual contributors start at 3 weeks’ vacation with 4 weeks at 2 yrs.- Career development opportunities- A collaborative values-based team culture- Wellness programs- A hybrid working model- Participation in- Communities of InclusionWant to make a difference in your career? Consider this opportunity.

Here is what you will be doing:
The Manager, Privacy is a key member of the privacy team and provides leadership for the organization's Privacy by Design approach to Privacy by managing the day-to-day activities of the privacy program, ensuring portfolios engage privacy program services and expertise as well as establishing, implementing, monitoring and assessing privacy program services and controls on an ongoing basis and advising the CPO or delegate(s) on same. The Manager supports all areas of the organization and contributes to the development and execution of the privacy operating plan. The Manager provides advice to the CPO or delegate(s), business partners and to the Senior Leadership Team as appropriate. The Manager assists the CPO or delegate(s) meet the following Privacy Office objectives:

- Build trust, a culture of privacy and breed innovation
- Implement Privacy by Design principles across OH by example and through collaboration, policies, and procedures
- Deliver fit-for-purpose privacy operations, advisory and assurance services
- Ensure OH compliance with applicable law, IPC requirements, policies and procedures
- The Manager leads privacy program activities and/or a team responsible for a balanced risk-based approach to privacy, ensuring that the organization is compliant with privacy legislation, associated obligations, and its privacy posture is aligned with industry best practices and risk tolerance set out in the OH Enterprise Risk Management framework. The Manager may assist the CPO or delegate(s) represent the organization with Ontarians and key external stakeholders including the ministry, Office of the Information and Privacy Commissioner/Ontario, other regulatory bodies, healthcare providers, vendors etc.
- The Manager will also focus their attention on continuously maturing Ontario Health’s privacy program and maintaining its reputation as a trusted business partner.
- Here is what you will need to be successful:

- Establish and manage relationships with OH business partners and external stakeholders to build trust, and ensure Ontario Health meets its business objectives and privacy obligations
- Work collaboratively with and supports all OH portfolios to achieve timely, quality responses to questions, inquiries and provide assurance and guidance on privacy matters
- Manage the day-to-day privacy program activities as required and as assigned
- Enable portfolios and business partners to meet their business objectives through privacy program activities, services, and expertise
- Establish, implement, monitor, assess and/or audit privacy program services and controls on an ongoing basis and/or as scheduled
- Ensure that all privacy policies, procedures and supporting documents are comprehensive, up-to-date and compliant with applicable law, IPC requirements and standards
- Ensure metrics and indicators are collected, logged and reported in accordance applicable laws, IPC requirements and OH policies and procedures
- Oversee the development and delivery of privacy training and awareness
- Advocate for a balanced and risk-based approach to privacy
- Ensures privacy impact assessments, reviews, audits, compliance monitoring and benchmarking are conducted as appropriate and in accordance with OH policies and procedures
- Ensures that appropriate vendor management and other privacy related agreements are in place and in accordance with OH policies and procedures
- Oversee the management of operational activities including but not limited to breaches, inquiries, complaints, access and correction requests, consent directives and overrides
- Monitor and stay current on relevant privacy, legal, technology and other matters that may impact OH’s privacy program and risk posture
- Develop and maintain strong privacy networks within the healthcare sector in Ontario and Canada
- Develop and maint