RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior

RQ09375 - Privacy Impact Assessment (PIA) Specialist - Senior Ministry of Health Work Location 222 Jarvis Street, Toronto, Ontario Hybrid Work Arrangement Hybrid (partly in physical workplace and partly remotely) Estimated Start Date Estimated End Date Business Days 208 Extension Possibility Probable after the initial mandate Hours per week 7.25 hours per day Security Level CRJMC Must Have 10+ years of experience in privacy impact assessment methodologies, tools, and techniques Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection Managing privacy risks in the collection, use, and disclosure of Personal Health Information (PHI) Demonstrated experience and competency to identify emerging privacy issues, changes, and trends in current and future that impact government policy directions Demonstrated experience and competency to prepare comprehensive reports, options analyses, briefing materials and presentations on privacy issues Responsibilities Develop privacy impact assessments and review recommendations from the privacy impact assessment (PIA) of proposed solutions and business processes Lead and provide technical expertise in the development of access and privacy tools to facilitate the implementation of key strategy data and digital initiatives Engage and facilitate privacy related discussions with a wide range of business, IT, legal and privacy stakeholders across the ministry and government agencies Examine complex program, policy and information system proposals to assess and document business flow and context; perform stakeholder analysis and feasibility of protection of Personal Health Information (PHI) Support projects to ensure compliance with security and privacy best practices, such as PHIPA (2004) Provide technical and systems advice on legacy systems, internet tools and system interfaces to improve protection of Personal Health Information (PHI) Develop business processes and procedures that describe information flows associated with new technologies, programs, policies or information systems Document physical and/or logical separation of personal health information to maintain required security mechanisms Provide privacy expertise, consultation, and support to project team members, senior management and colleagues advising on legislation and regulations Recommend mitigation strategies and privacy enhancing technologies in accordance with PIA procedures Prepare and present status reports for steering committees, advisory panels, working groups and governance bodies Experience and Skill Set Requirements Technical Skills (50%) 10+ years of experience in privacy impact assessment methodologies, tools, and techniques Application of threat and risk analysis principles, program analysis, and business analysis Understanding of policy development for creating options and strategies on information management and privacy protection Practical knowledge of IT concepts and processes impacting personal information protection Managing privacy risks in the collection, use, and disclosure of Personal Health Information (PHI) Leading end-to-end operational risk assessments selecting methodologies, identifying compliance gaps, and recommending remediation or simplification Implementing information privacy best practices Core Skills and Experience (35%) 10+ years of experience resolving complex issues, identifying options, making recommendations Experience analyzing policy proposals to assess I&IT business implications and developing strategic policy options Experience applying legislation, regulations, directives to ensure initiatives conform to legal requirements Experience identifying and evaluating emerging privacy issues and trends impacting government policy Experience preparing comprehensive reports, briefing materials and presentations on privacy issues Ability to develop effective relationships with senior management and stakeholders General Skills (10%) Strong leadership and people management skills Exceptional analytical, troubleshooting, problem-solving, decision-making skills Strong interpersonal, verbal, written communication and presentation skills Proven troubleshooting and critical thinking experience Strong facilitation and negotiation skills to drive successful outcomes Excellent customer service skills, tact, and diplomacy Public Sector Experience (5%) 5+ years of experience with federal, provincial, or broader public-sector healthcare providers Familiarity with IPC privacy and de-identification guidelines, Government of Ontario IT Standards (GO-ITS), and public sector corporate policies on privacy and record keeping Knowledge of Public Sector Enterprise Architecture artifacts, processes, and documentation standards Note This position is currently listed as “Hybrid” as consultants will be required to work partly in the physical workplace and partly remotely. The details of this arrangement will be at the Hiring Manager’s discretion. Extension/Amendment Attestation Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond the maximum contract value and any extension options included in the original SOW. Eligibility and Application Steps If you are enthusiastic about this exciting opportunity, we kindly request you to provide the following documents: Updated Resume in word format (Mandatory) Skills Matrix and References (Mandatory) Expected hourly rate (Mandatory) Visa Status (Mandatory) LinkedIn ID (Mandatory) Contact Application Format Without mandatory documents, we cannot submit a candidate. Call or Text #J-18808-Ljbffr