Privacy and Compliance Manager

**WHO WE ARE**
When it comes to health, we’re always looking for ways to push for better. It’s why we were founded in the first place. In 1957, our founder, pharmacist William Wilkinson, witnessed a mother sacrifice her health by forgoing her own medicine to pay for her sick daughter’s prescription. He knew there had to be a better way. So, he introduced North America’s first prepaid drug plan, and GreenShield was born as a not-for-profit with a mission to support better health for all Canadians.

We aren’t just a health and benefits company. We’re the only not-for-profit social enterprise that brings worlds of coverage and care together, all in one place.
We’re noble challengers, purposefully building a better way and we need the best people to help us create a more holistic approach that takes care of the mind and body.

Our mission is to create better health for all Canadians, and we know that starts with our employees.

**THE ROLE IN A NUTSHELL**

The newly created role of Privacy and Compliance Manager (Health) offers the unique opportunity to influence and shape the privacy and compliance program specific to GreenShield’s Health business.

In this role, you will also support the digital team at GreenShield to enhance its integrated payor-provider platforms and embrace data governance, data enablement and artificial intelligence as a means of advancing our mission of Better Health for All.
- The primary responsibilities for this position include, but are not limited to:

- Design, develop, implement, and provide leadership for the privacy program of GreenShield Health building on GreenShield’s enterprise Privacy Program, including privacy processes, policies, standards, and procedures that ensure the appropriate use and protection of personal information by those areas.
- Lead, develop, and execute the compliance program for GreenShield Health, leveraging the enterprise compliance program.
- Monitor, interpret and maintain awareness of new and existing regulatory, compliance, and privacy requirements, engaging in effective oversight of the first line of defense and providing expertise, advice and oversight of professional and regulatory obligations, including providing appropriate guidance to GreenShield Health on potential impacts and appropriate controls.
- Assess the adequacy of, adherence to, and effectiveness of day-to-day compliance procedures and controls in place for GreenShield Health and provide reports on all potential or actual compliance risk issues ensuring that they are investigated and remediated as appropriate.
- Identify and provide guidance concerning compliance and privacy related risks associated with strategic initiatives and escalate any issues and proposed solutions to the Privacy and Compliance Officer or other management as necessary.
- Support the response to data breaches as part of the Incident Response Team.
- Lead working groups, as needed, to identify and operationalize requirements for regulatory compliance and privacy that have material impact on the operations of GreenShield Health.
- Develop and implement compliance and privacy training and testing programs for GreenShield Health.
- Support M&A activity through conducting due diligence assessments and provide findings to the Privacy and Compliance Officer or other management as required.
- Provide guidance and expert advice to the business in relation to privacy and personal information protection matters, resolution of privacy breaches and changes to consent management approaches to advance strategic initiatives.
- Develop, manage and execute integration plans for acquired companies within GreenShield Health as it relates to compliance and privacy functions.
- Assist with preparing and presenting compliance related reporting and communications to senior management, and the Board of Directors as required.
- Establish and maintain effective relationships with regulators relevant to the business of GreenShield Health.
- Identify strategic opportunities to improve operating performance and make recommendations to the Privacy and Compliance Officer and senior management as appropriate.

**WHO WE'RE LOOKING FOR**
- We’re not looking for just anyone. We’re looking for a unique individual with a big brain and a big heart who wants to help us create better health for all Canadians.
- Bachelor’s degree in a related discipline
- Minimum of 7 years of progressive experience in privacy and compliance management, preferably with a health services or pharmaceutical company
- Strong knowledge of privacy laws and regulations and requirements
- Experience working with regulators and regulated health professional bodies such as the College of Social Workers or Pharmacists
- Proactive and independent
- Problem solver with attention to detail and comfort in ambiguity
- Excellent organizational and priority-setting skills
- Exceptional written and verbal communication skills
- Comfortable interacting with senior e