Privacy Compliance Officer

Company Profile:
Maximus Canada is an industry leader in the provisioning of products and services to support the delivery of government services in North America and internationally. With operations across Canada and around the globe, Maximus provides innovative, practical and meaningful solutions to help government programs and services function more effectively and efficiently.

We are constantly assessing new technology, processes and methods of delivering services to the citizens of Canada. With our expertise in program information management, claims processing, contact centre services, document processing and information technology, we are positioned for significant growth.

Maximus Canada offers competitive market-based salaries, comprehensive employer-paid benefits and a defined-benefit pension plan or a Group RSP with employer-matching contributions, for eligible employees. Our people also get some great perks too, such as employee appreciation events throughout the year, along with a supportive results-oriented work environment.

**Job Description**:
**Department Summary**

As part of Maximus Canada’s compliance monitoring program Maximus employs a full time Privacy Compliance Auditor who pro-actively monitors employee access within the systems that Maximus administers.

**Position Summary**

The Privacy Compliance Auditor is responsible for the employee system access audit and special investigation duties as assigned by the Chief Privacy Officer. This process involves the detailed analysis of all employee accesses within the systems that Maximus administers and detailed reporting of all outcomes. The position also assists with the logic behind the processes and any automation of the processes when possible.

The position is also responsible for the reporting of all administrative privacy incidents to Maximus clients and the follow up for all remediation activities taken in response to these administrative incidents.

In addition, the position provides assistance with the review and development of privacy policies and procedural documentations, maintaining the Privacy Department SharePoint, maintains a working knowledge of all Federal and Provincial privacy legislation, and assists with the develop of privacy impact assessments for the company and Maximus Clients.

**Key Accountabilities**:
**_
Privacy Audit and Special Investigations:_**

1. Responsible for the administration of the privacy audit program including:

- Audit of employee’s key stroke activity to identify inappropriate access to, use, and or disclosure of personal information residing in each system.
- Production of employee operational activity reports.
- Analysis of employee keystroke mapped to operational requirements.
- In-depth analysis of an employee’s activities where standard operational requirements cannot be identified to further identify possible the nature of the activities.
- Ongoing communications with Managers and Supervisors to assess employee work processes.
- Identifying and reporting any perceived inappropriate activity to the attention of the Chief Privacy Officer for escalation to an investigation if required.
- Development and refinement of audit processes including detailed analysis of system capabilities/functionality/automation capabilities
- Documentation of all audit processes and outcomes
- Production of administrative employee error reports for the Quality Assurance team follow up.

2. Assisting with special investigations into alleged employee wrongdoing regarding the collection, use and/or disclosure of personal information including:

- Conducting detailed investigations upon the direction of the Chief Privacy Officer, Maximus Canada for enquiries brought forward by our Clients, members of the public, and/or internally identified.
- Providing forensic analysis of third party/employee activity involving the collection, use and/or disclosure of personal information which may lead to disciplinary action up to and including termination.
- Providing further follow up and interpretation of investigation findings to both internal and external public bodies upon direction of the Chief Privacy Officer, Maximus Canada.
- Reporting all findings as necessary to the Chief Privacy Officer, Maximus Canada.

**_
Privacy Breach Reporting and Liaison:_**

1. Reporting and administrative follow up for all administrative potential privacy incidences including:

- Liaison with Maximus Clients and other entities/central services providers as directed.
- Follow up with Managers and Supervisors regarding the specific causes of privacy incidences.
- Providing advice regarding appropriate mitigation steps to be conducted for each privacy incident and ensuring that all mitigation and document recovery steps have been completed and conform to both the Client’s and Maximus breach management standards.
- Ongoing tracking and reporting of incident related statistics.
- Reporting all findings to the Chief Privacy Officer, Ma