Commander Privacy

**Job ID**: 52430

**Job Category**:Records & Information Management

**Division & Section**:Toronto Paramedic Services, PS Program Dev & Professional Standards

**Work Location**:Fire & Paramedic HQ & EMS Station 53, 4330 Dufferin St, Toronto

**Job Type & Duration**:Full-Time, Permanent Vacancy

**Salary**:$112,280.00 - $149,247.00 (2024 Rate)

**Shift Information**: Monday to Friday, 35 hours per week

**Affiliation**: Non-Union

**Number of Positions Open**: 1

**Posting Period**: 23-Jan-2025 to 13-Feb-2025

**Job Summary**:
**Major Responsibilities**:

- Develops and implements detailed plans and recommends policies regarding program specific requirements.
- Manages assigned projects, ensuring effective teamwork and communication, high standards of work quality and organizational performance and continuous learning.
- Develops, recommends and administers the annual budget for the unit, and ensures that the unit's expenditures are controlled and maintained within approved budget limitations.
- Assumes responsibility for Divisional Information Management to align the Division’s information policies and practices with the City's expectations.
- Manages the annual Information Management Plan and addresses internal information management needs.
- Plans and manages record retention, retrieval and disposition of data, adhering to legislative obligations, corporate policies and guidelines.
- Acts as the Division’s Health Information Custodian under the Personal Health Information Protection Act (PHIPA) and represents the Division as the assigned Privacy Officer.
- Conducts research into assigned areas ensuring that such research takes into account developments within the field, corporate policies and practices, legislation and initiatives by other levels of government. Applies relevant information privacy laws, regulations, privacy enhancing best practices and industry-accepted privacy and security risk management strategies within the Division.
- Identifies and manages the development and implementation of policies and procedures that ensure the confidentiality, integrity, security and availability of information and records management mandated by legislation including the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) and PHIPA.
- Provides direction to the Division in the management of risks such as privacy breaches and makes changes to business and clinical processes to prevent re-occurrence. Manages the resolution of privacy breaches, incidents, and complaints within the Division ensuring adherence to related legislations, policies, procedures, and mitigating risk to the Division/City.
- Investigates internal and external violations and breaches related to privacy policies or procedures. Makes recommendations based on investigation results which could lead to the discipline or dismissal of staff.
- Attends disciplinary hearings as required to confirm details of the investigation findings.
- Coordinates responses and prepares correspondence to formal and informal privacy complaints that are often sensitive and/or political by conducting research and investigation into the complaint.
- Provides complex privacy compliance advice on all aspects of Divisional projects from design to implementation including providing direction to staff as required.
- Provides leadership on projects supporting compliance with MFIPPA and PHIPA and other risk management frameworks/standards as applicable.
- Recommends privacy and quality assurance requirements consistent with MFIPPA, PHIPA, legislation and corporate standards.
- Leads the implementation of proactive and progressive change related to business processes, policies and legislative requirements to facilitate operational improvements.
- Plans, prioritizes and manages internal and/or external assigned project resources to meet project objectives.
- Performs and coordinates the delivery of privacy impact assessments of in-scope projects. Consults with the Office of the Chief Information Security Officer regarding privacy matters.
- Manages the development and delivery of risk management training for Divisional staff.
- Conducts research and prepares reports and training materials specific to privacy implications of new technologies and information systems.
- Deals with resistance to advice, negotiates and resolves conflict, clarifies linkages between core business areas of the Division and linkages to MFIPPA and PHIPA privacy compliance.
- Prepares and/or supervises the preparation of various formal contractual documents such as Request for Information/ Proposal/Quotation, Statement of Work, Memorandum of Understanding and Service Level Agreements.
- Provides leadership in the evaluation, selection and recommendation of technical solutions and professional services.
- Anticipates, identifies and analyzes organizational impacts of emerging privacy requirements; recommends and coordinates innovative solutions using conflict resolution and negotiatio