Client Preferrances to someone who are local to OntarioJob Description:We're seeking a Privacy Operations Manager to run day-to-day privacy operations for a healthcare-sector client engagement — managing the privacy service desk, PHI access/correction request handling, consent operations, and incident intake/containment, while supervising a distributed team of privacy analysts.Day-to-Day Responsibilities:Run day-to-day privacy operations, managing the service desk intake queue, triage, prioritization, and SLA turnaroundManage end-to-end handling of PHI access and correction requests — identity verification, record retrieval, redaction review, response letters, statutory PHIPA timeline trackingAdminister consent operations, including consent directives, withdrawal/reinstatement, override handling, and escalation/documentation to the accountable privacy executiveOperate privacy incident and breach process at intake/containment stage, maintaining the incident register and escalating notifiable events within contractual timeframesOwn privacy logging operations — configuration, integrity, retention, and proactive/reactive review of access and audit logsDeliver scheduled and ad hoc privacy audit/compliance reporting covering request volumes, aging, incident trends, override rates, and remediation statusMaintain privacy operational runbooks, SOPs, and templates, keeping them aligned to PHIPA, FIPPA, and client policy updatesSupervise, coach, and quality-assure a distributed team of privacy analysts and service desk agents — workload allocation, capacity planning, performance managementPartner with security operations, service management, and application support to resolve cross-functional privacy issues and embed privacy controls into ITSM workflowsSupport internal audits, client assurance reviews, and regulator requests by assembling evidence packages and case filesAdvise stakeholders on operational privacy risk,



process gaps, and control improvementsDrive continuous improvement — automation, tooling enhancements, metric definition, backlog reductionRequired Qualifications:5+ years in privacy operations, information governance, or compliance, with robust focus on regulated environments (healthcare, public sector, consulting)4+ years hands-on service desk/privacy operations experience at scale4+ years processing access and correction requests, including identity verification, redaction, statutory response timelines3+ years administering consent management, including override handling and documentation3+ years in privacy incident and breach handling — intake, containment, case documentation, escalation3+ years with access/audit logging — log review, anomaly investigation, evidence preservation3+ years producing audit, compliance, and operational reporting for internal and client stakeholders3+ years working knowledge of PHIPA, FIPPA, and PIPEDA in an operational setting2+ years supervising/mentoring analysts or service desk agents2+ years in consulting or client-facing rolesWorking knowledge of ITSM platforms (ServiceNow, Jira Service Management) and case management/log analysis toolingPrivacy certification: CIPP/C, CIPM, or equivalent (or active progress toward)Eligibility for background screening and security clearance for client environment accessBachelor's degree in Health Informatics, Information Management, Business, Engineering, Technology, Information Systems, or related fieldNice to Have:Consulting/client-facing experience within Canadian public healthcare sectorExperience supporting health information custodians, prescribed entities, or HINPsFamiliarity with provincial digital health assets, consent directive models, ONE IDExposure to privacy audit tooling or automated access-monitoring solutionsAdditional certifications: CIPT, CISM, CISA, CHPC, ITIL, Lean Six SigmaBilingual proficiency in English and French

📌 Privacy Operations Manager (Toronto)
🏢 Vivid soft Global
📍 Toronto