RQ11517 - Privacy Impact Assessment (PIA) Specialist - Senior
To lead and support the development of Privacy ImpactAssessments (PIAs), which evaluate whethernew technologies, informationsystems or proposed programs and policies meet legal privacy requirements, andaddress client concerns. Privacy requirements include ensuring programcompliance with applicable privacy statutes (provincial, federal, or municipal)as well as applicable regulations, program statutes, Management Board ofCabinet Directives, standards, guidelines, corporate policies andinternationallyestablishedFairInformation Practices.

Major Responsibilities:

Followingseveral methodologies (PIAmethodology, business analysis, riskanalysis principles, IM lifecycle) prepares in-depth report tailored tothe target audience (e.g., Privacy Impact Assessment Report, briefingnotes for senior management) that analyses existing and proposed policies,programs and technical upgrades for risks andimpactson anindividual’s personal information and privacy controls. Findings andrecommendations for action areidentifiedfor business owners toaction.

Leverageproject management framework toidentifyand manage timelinesand budget.

Developand deliver PIA related training to clients.

Provideprivacyadvice on PIA approaches, bestpracticesand potentialmitigation strategies for consideration by business owners.

Consult,negotiateandmediate across diverse subject matter expert groups (e.g., technical,business, legal, etc.) to gather/coordinate input.

Requirements
Experience and Skill Set Requirements:

Must have:

Excellentknowledge of privacy and security concepts, trends, and issues. This willinclude an understanding of their impact on business processes, as well asskill with interpretation and communication of principles and compliancerequirements

Knowledgeof, and experience in researching and applying relevant informationprivacy laws, regulations, jurisprudence (particularly as it relates tothe Information and Privacy Commissioner of Ontario) and riskcountermeasures





Experiencein conducting Privacy Impact Assessments in public sector context

Knowledgeand ability to interpret and apply Ontario’s Freedom of Information andProtection of Privacy Act (FIPPA) and its municipal equivalent theMunicipal Freedom of Information and Protection of Privacy Act (MFIPPA),Personal Health Information Protection Act (PHIPA) their respectiveregulations and related jurisprudence

Abilityto lead, mange or support the development of a PIA either independently oras part of a team by directing and gathering input from specificindividuals within the organization

Nice to have:

Ideal candidate should have PIA/Privacy experience withinthe digital/IT platforms.

Prior OPS or public sector exp.

Skill Set Requirements:

General Skills:

DomainKnowledge (Policy planning, Legislation, Impact Assessments):

Excellentknowledge of privacy and security concepts, trends, and issues. This willinclude an understanding of their impact on business processes, as wellas skill with interpretation and communication of principles andcompliance requirements

Knowledgeof, and experience in researching and applying relevant informationprivacy laws, regulations, jurisprudence (particularly as it relates tothe Information and Privacy Commissioner of Ontario) and riskcountermeasures

Experiencein conducting Privacy Impact Assessments in public sector context

Knowledgeof, and experience with privacy enhancing best practices

Knowledgeand ability to interpret and apply Ontario’s Freedom of Information andProtection of Privacy Act (FIPPA)



and its municipal equivalent theMunicipal Freedom of Information and Protection of Privacy Act (MFIPPA),Personal Health Information Protection Act (PHIPA) their respectiveregulations and related jurisprudence

Familiaritywith federal Personal Information Protection and Electronic Documents Act(PIPEDA) and US PATRIOT Act and Policy Knowledge

Familiaritywith OPS Privacy Impact Assessment Process and Tools released by theOntario Ministry of Government Services;

Informationand Record Keeping Knowledge

Experiencein developing risk assessment tools, methodologies, policies andprocedures to effectively manage personal information

Knowledgeof policies, directives, standards, business rules, procedures andguidelines relating to records management including classification,retention and disposition of information

Technicalknowledge and skills:

Goodunderstanding of related disciplines, such as IT security, IT systemdesign, policy development (privacy or security), business architecture,legal processes, Freedom of Information administration, businessanalysis, risk management, project management.

OperationalProgram and Business Design Skills

Technologyand Systems Knowledge

Communication,Consultation and Interpersonal Skills:

Abilityto lead, mange or support the development of a PIA either independentlyor as part of a team by directing and gathering input from specificindividuals within the organization

Knowledgeand ability to create and understand data flow diagrams and businessprocess diagrams

Abilityto recognize the need for, and seek input from external experts asrequired

Excellentcommunication skills with technical and business audiences and non-access and privacy experts.

Analyticalskills to understand the current and future access and privacyimplications of policies, decisions and business initiatives

Knowledgeof Information Technology concepts and processes that impact theprotection of personal information, including (but not limited to)Internet tools, system interfaces, information security, informationarchitecture and data flows

#J-18808-Ljbffr

📌 11698 (Ontario)
🏢 Zohorecruit
📍 Ontario