RQ11693 - Privacy Impact Assessment (PIA) Specialist - Senior To guide, influence and lead planning and development ofPrivacy Impact Assessment (PIA) that evaluates whether new technologies,information systems or proposed / policies meet legal privacy requirements andaddress client concerns.

Requirements include ensuring program complies with FIPPA,PIPEDA, PHIPA and other privacy laws (provincial, federal, municipal) as wellas applicable regulations, program statutes, Management Board of CabinetDirectives, corporate policies and internationally established Fair InformationPractices. May involve work with other jurisdictions and the broader publicsector.

Major Responsibilities:
Knowledge and ability to interpret and apply Ontario’sFreedom of Information and Protection of Privacy Act (FIPPA) and its municipalequivalent the Municipal Freedom of Information and Protection of Privacy Act(MFIPPA), Personal Health Information Protection Act (PHIPA) their respectiveregulations and related jurisprudence.

Provides consultative advice and guidance on laws,regulations, policies, standards, or procedures to clusters & ministries,management, personnel, or key groups.

Leads the development of a privacy impact assessment thatevaluates whether new technologies, information systems, or proposed programsor policies meet legal and policy privacy requirements, determines andmitigates risks, and addresses clients’ concerns.

Manages PIA service resource utilization, workloadmanagement and manage PIA intake queue to optimize resource allocation.

Provides guidance and leadership to staff with theresponsibility to plan work, set objectives, direct the work of staff whilemanaging unexpected changes to deadlines and work demands.

Leads client stakeholder management as primary point ofcontact of IT clients, providing strategic advice on project provisioning,policy and to make informed business decisions.

Leads and/or participates on cross-cluster/IPC/Ministryresearch teams and working committees mandated to review/implement keystrategic FOI/Privacy I & IT commitments.

Analyzes policy proposals from ministries and cabinetsubmissions, to assess/evaluate I & IT implications and to develop privacystrategy and planning approaches.

Requirements Experience and Skill Set Requirements:
Must have:
Excellentknowledge of privacy and security concepts, trends, and issues.

Thiswill include an understanding of their impact on business processes, aswell as ability to interpretation and communicate principles andcompliance requirements.

Knowledgeof, and experience in researching and applying relevant informationprivacy laws, regulations,



jurisprudence (particularly as it relates to the Information and Privacy Commissioner of Ontario) and riskcountermeasures.

Familiaritywith OPS Privacy Impact Assessment Process and Tools released by theOntario Ministry of Government Services;

Goodunderstanding of related disciplines, such as IT security, IT systemdesign, policy development (privacy or security), business architecture,legal processes, Freedom of Information administration, business analysis,risk management, project management.

Analyticalskills to understand the current and future access and privacyimplications of policies, decisions and business initiatives

Knowledgeof Information Technology concepts and processes that impact theprotection of personal information, including (but not limited to)Internet tools, system interfaces, information security, informationarchitecture and data flows

Nice to have:
Knowledgeof, and experience with the policies and procedures of the Ontariogovernment (e.g. business case development, project approvals and policydevelopment)

Skill Set Requirements:
Responsibilities:
Required to lead or support the development of a PrivacyImpact Assessment that evaluates whether new technologies, information systems,or proposed programs or policies meet legal

and policy privacy requirements, determine and mitigaterisks, and address clients’ concerns.

These requirements include ensuring that the programcomplies with provincial, municipal, federal and private sector access andprivacy legislation, as well as relevant regulations, statutes, OPS policies,directives, standards, guidelines and internationally accepted Fair InformationPractices.

General Skills:
Excellent knowledge of privacy and security concepts,trends, and issues.

This will include an understanding of their impact onbusiness processes, as well as ability to interpretation and communicateprinciples and compliance requirements.

Knowledge of, and experience in researching and applyingrelevant information privacy laws, regulations, jurisprudence (particularly asit relates to the Information and Privacy Commissioner of Ontario) and riskcountermeasures.

Experience in conducting Privacy Impact Assessments inpublic sector context.

Knowledge of, and experience with privacy enhancing bestpractices.

Knowledge and ability to interpret and apply the Ontario’sFreedom of Information and Protection of Privacy Act (FIPPA)



and its municipalequivalent the Municipal Freedom of Information and Protection of Privacy Act(MFIPPA), Personal Health Information Protection Act (PHIPA) their respectiveregulations and related jurisprudence.

Familiarity with the federal Personal Information Protectionand Electronic Documents Act (PIPEDA) and US PATRIOT Act.

Policy Knowledge:
Familiarity with OPS Privacy Impact Assessment Process andTools released by the Ontario Ministry of Government Services;

Good understanding of related disciplines, such as ITsecurity, IT system design, policy development (privacy or security), businessarchitecture, legal processes, Freedom of Information administration, businessanalysis, risk management, project management.

Operational Program and Business Design Skills:
Ability to lead, manage or support the development of a PIAeither independently or as part of a team by directing and gathering input fromspecific individuals within the organization.

Knowledge and ability to create and understand data flowdiagrams and business process diagrams.

Ability to recognize the need for, and seek input fromexternal experts as required.

Excellent communication skills with technical and businessaudiences and privacy experts.

Technology and Systems Knowledge:
Analytical skills to understand the current and futureaccess and privacy implications of policies, decisions and business initiatives

Knowledge of Information Technology concepts and processesthat impact the protection of personal information, including (but not limitedto) Internet tools, system interfaces, information security, informationarchitecture and data flows

Information and Record Keeping Knowledge:
Experience in developing risk assessment tools,methodologies, policies and procedures to effectively manage personalinformation

Knowledge of policies, directives, standards, businessrules, procedures and guidelines relating to records management includingclassification, retention and disposition of information

Knowledge and understanding of Accessibility for Ontarianswith Disabilities Act (AODA) and related regulations and standards

Skilled certification from a related discipline such asIT security, architecture

Experience providing education and training related toprivacy

Knowledge of, and experience with the policies andprocedures of the Ontario government (e.g. business case development, projectapprovals and policy development)

PIA Specialist Skills:
PrivacyAssessment Experience, Policy and Legislative Requirements

Technicalknowledge

Leadershipand Communications

DigitalIdentity Frameworks and Standards

#J-18808-Ljbffr

📌 11704 (Ontario)
🏢 Zohorecruit
📍 Ontario