PRIVACY AND COMPLIANCE SPECIALIST

Job Title: Privacy and Compliance Specialist

Reports to: Lead, Privacy & Compliance Officer

Status: 8-month contract

Direct Reports: None

Travel Requirements: None

Number of Vacancies: 1

Office Hours: 8:30am – 4:30pm

May be required to occasionally work after-hours.

Healthcare Insurance Reciprocal of Canada (HIROC) is a trusted healthcare safety advisor, committed to offering a full spectrum of insurance, risk and claims management products and support.

HIROC knows healthcare as it’s the largest not-for-profit healthcare liability insurer in the country, with over 700+ healthcare organizations part of the Reciprocal. Combined with sage counsel and risk management solutions, HIROC works with its partners to increase safety.

As a Reciprocal, HIROC is governed by its Subscribers and remains an innovative, agile, and proactive partner. Since its inception in 1987, the not-for-profit has returned over $260 million to the healthcare system. HIROC’s 35 years of data is combined with its extensive experience to advise and share learnings, all with the goal of scaling knowledge and increasing safety across Canada’s healthcare system.

One common thread running through HIROC’s culture is the feeling of being part of something unique: partnering to create the safest healthcare system – HIROC’s vision.

Each employee has the opportunity to find their calling and help build a stronger organization designed to meet the needs of its Subscribers. As a Top 100 GTA Employer ten years running, HIROC employees are empowered to find solutions and create amazing experiences in service to its Subscribers.

Join us and be part of the team working to make a difference.

KEY RESPONSIBILITIES:

- Support implementation of Data Classification and oversee change management and adoption
- Assist Privacy, Information Security, and Compliance approvals of new tools, technology and processes. Track and monitor statuses on privacy and security recommendations for new systems, cloud solutions and projects affecting sensitive data
- Coordinate and gather required evidence to assess compliance for Data Protection, Information Security and Privacy
- Respond to employees and support with respect to privacy and compliance queries, processes, tools, customized privacy analysis, trends analysis, and meeting reporting and dashboard preparations
- Assist HIROC’s Lead, Privacy and Compliance Officer with NIST CSF and SOC 2 compliance review activities, vendor management, and internal and third-party audit activities
- Maintaining and updatingexisting documentations, includingpolicies, checklists, asset inventories, etc.
- Help develop knowledge base for Privacy, Compliance, and Information Security that are compliant with applicable jurisdictional legislations and regulations (e.g. repository of procedures, changes to technology, etc.



associated with change management)
- Working with HIROC's IT, business departments, MSSP and vendors to support the investigations of high-priority alerts that may pose threats to HIROC information systems or data
- Enhance HIROC's current privacy and information security training syllabus and deliver formal employee training in line with industry standard practices
- Assist with the development of regular and ad-hoc privacy and compliance assessments and analytical reports for dissemination to various audiences, including Executive Team, Operations, and Employees
- Contribute to development and revision of cybersecurity, AI and data security tools and services based on extensive researchof current legislation, professional and/or governing organizations, and risk management resources, claims data, and best practices
- Contribute to the departments and team planning
- Participate in ongoing educational opportunities to remain current on your field of expertise (e.g. regulatory changes, information privacy commissioner decisions, information security practices, Artificial Intelligence related risks to data, data governance, etc.)
- Act as a resource to other departments and HIROC staff, and provide mentorship as required
- Other duties as assigned

KNOWLEDGE, SKILLS & ABILITIES:

- Demonstrate strong organizational, research, analytical and problem-solving skills to evaluate situations, make recommendations and take effective action
- Capable of articulating complex technical concepts or scenarios to both technical and non-technical audiences
- Self-motivated, ability to work both independently and as a team member
- Qualified privacy or security designation is an asset
- Detailed understanding of information security concepts and ability to work with subject matter experts in IT and cybersecurity
- Good knowledge of privacy and security management principles, practices, policies, and procedures
- Demonstrates good communication skills and a positive team player
- Passionate about privacy, corporate security, analysis and problem-solving

EDUCATION, TRAINING & EXPERIENCE:

- Completed post-secondary education at the Bachelor or College level in Records Management, Information Management, Privacy Law, Data Security, or Information Technology
- Minimum 5 years of related work experience or an equivalent combination of education and experience
- Privacy related experience and understanding of Canadian federal and provincial privacy laws would be considered an asset




- Certifications of the following are an asset: CIPP/C, CIPM, CIPT, CISM

WORKING CONDITIONS:

- Working at a computer for much of the day
- HIROC is committed to a hybrid work workplace, which includes 2 days per week in office, with departments meeting in person at least two times per month, as per HIROC’s Hybrid Work Policy. HIROC’s hybrid model providesopportunities for team building, education, leadership development and cross departmental relationship building.

HOURS OF WORK:

- May be required to work occasionally after-hours
- Monday – Friday 8:30am – 4:30pm, some flexible hours may be required to meet Subscriber needs.

SALARY RANGE: $80,000.00 - $100,000.00

The salary range offered for this position will be determined by a variety of factors including the candidate’s skills, competencies, qualifications and relevant experience, in accordance with HIROC’s Compensation Policy.

TO APPLY: Please submit your résumé to [email protected] In order to be considered for this position, please include a current résumé or detailed qualifications summary with your application. Only those selected for an interview will be contacted.

At HIROC we do not use AI (Artificial Intelligence) at any stage of our recruitment process. If you have any questions regarding our recruitment process, please reach out to our Human Resources Department at [email protected]

HIROC is committed to fostering a climate of equity, diversity, inclusion, and accessibility. HIROC respects the diversity of all members of its community and welcomes applications from those who have demonstrated a commitment to the values of equity, diversity and inclusion. Applications from members of groups that have been historically disadvantaged and marginalized, including First Nations,Métis and Inuit peoples, racialized persons, persons with disabilities, those who identify as women, 2SLGBTQ+, individuals who self-identify on the basis of any of the protected grounds under the Human Rights Code and/or others who may contribute to the further diversification of ideas within its community are encouraged.

HIROC is committed to fair assessment of a candidate’s abilities, and consideration for diversity of thought, method, and experience, including non-traditional career paths.

HIROC is committed to providing a barrier-free environment for all stakeholders, including its participants, employees, job applicants, suppliers, the public and any visitors who may enter its premises, access its information, or use its services. As an organization, HIROC respects and upholds the requirements set forth under the Accessibility for Ontarians with Disabilities Act (AODA) and its associated standards and regulations and will ensure that HIROC offers a safe and welcoming environment that is respectful of each person's dignity and independence.

📌 Privacy and Compliance Specialist (Toronto)
🏢 Healthcare Insurance Reciprocal of Canada (HIROC)
📍 Toronto