Client: Ministry of Public and Business Service Delivery and Procurement – RQ11693

We are seeking a Senior Privacy Impact Assessment (PIA) Specialist with extensive knowledge of privacy and security concepts, information privacy legislation, risk assessment, and public sector compliance requirements. The ideal candidate will have experience conducting Privacy Impact Assessments (PIAs), interpreting applicable provincial and federal privacy laws, assessing information technology systems and data flows, and developing strategies to identify and mitigate privacy risks. The successful candidate will provide strategic advice, lead privacy assessment activities, engage stakeholders, and ensure that technologies, information systems, programs, and policies comply with applicable legislation, policies, standards, and established Fair Information Practices.

Role Snapshot

- Job Title: RQ11693 – Privacy Impact Assessment (PIA) Specialist – Senior
- Client: Ministry of Public and Business Service Delivery and Procurement
- Work Location: 222 Jarvis Street, Toronto, Ontario, Canada
- Work Arrangement: Onsite – 5 Days per Week
- Estimated Start Date: October 12, 2026
- Estimated End Date: March 31, 2027
- Business Days: 95.00
- Extension: Probable after the initial mandate
- Hours: 7.25 hours per day
- Security Level: No Clearance Required

Must Have
- Excellent knowledge of privacy and security concepts, trends, and issues, including their impact on business processes and the ability to interpret and communicate principles and compliance requirements.
- Knowledge of, and experience researching and applying, relevant information privacy laws, regulations, jurisprudence, particularly as they relate to the Information and Privacy Commissioner of Ontario, and risk countermeasures.
- Familiarity with the Ontario Public Service (OPS) Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services.
- Positive understanding of related disciplines, including IT security, IT system design, privacy or security policy development, business architecture, legal processes, Freedom of Information administration, business analysis, risk management, and project management.
- Analytical skills to understand the current and future access and privacy implications of policies, decisions, and business initiatives.
- Knowledge of information technology concepts and processes that impact the protection of personal information, including Internet tools, system interfaces, information security, information architecture, and data flows.

Nice to Have
- Knowledge of, and experience with, the policies and procedures of the Ontario government, including business case development, project approvals, and policy development.

Description The successful candidate will guide, influence, and lead the planning and development of Privacy Impact Assessments (PIAs) to evaluate whether new technologies, information systems, or proposed programs and policies meet legal privacy requirements and address client concerns. Requirements include ensuring that programs comply with the Freedom of Information and Protection of Privacy Act (FIPPA), Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Health Information Protection Act (PHIPA), and other provincial, federal, and municipal privacy laws, as well as applicable regulations, program statutes, Management Board of Cabinet Directives, corporate policies, and internationally established Fair Information Practices. The role may involve working with other jurisdictions and the broader public sector.

Major Responsibilities

- Demonstrate knowledge of and the ability to interpret and apply Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), its municipal equivalent, the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), the Personal Health Information Protection Act (PHIPA), their respective regulations, and related jurisprudence.




- Provide consultative advice and guidance on laws, regulations, policies, standards, and procedures to clusters, ministries, management, personnel, and key groups.
- Lead the development of Privacy Impact Assessments that evaluate whether new technologies, information systems, proposed programs, or policies meet legal and policy privacy requirements, determine and mitigate risks, and address client concerns.
- Manage PIA service resource utilization and workload management, and manage the PIA intake queue to optimize resource allocation.
- Provide guidance and leadership to staff responsible for planning work, setting objectives, and directing staff activities while managing unexpected changes to deadlines and work demands.
- Lead client and stakeholder management as the primary point of contact for IT clients, providing strategic advice on project provisioning and policy to support informed business decisions.
- Lead and/or participate in cross-cluster, Information and Privacy Commissioner (IPC), and Ministry research teams and working committees mandated to review and implement key strategic Freedom of Information (FOI), Privacy, and Information and Information Technology (I⁢) commitments.
- Analyse policy proposals from ministries and Cabinet submissions to assess and evaluate I⁢ implications and develop privacy strategies and planning approaches.
- Lead or support the development of Privacy Impact Assessments that evaluate whether new technologies, information systems, proposed programs, or policies meet legal and policy privacy requirements, determine and mitigate risks, and address client concerns.
- Ensure that programs comply with provincial, municipal, federal, and private-sector access and privacy legislation, as well as relevant regulations, statutes, OPS policies, directives, standards, guidelines, and internationally accepted Fair Information Practices.

Experience And Skill Set Requirements

- Privacy Assessment Experience, Policy and Legislative Requirements — 35%
- Demonstrate excellent knowledge of privacy and security concepts, trends, and issues.
- Understand the impact of privacy and security requirements on business processes and demonstrate the ability to interpret and communicate principles and compliance requirements.
- Research and apply relevant information privacy laws, regulations, jurisprudence, particularly as it relates to the Information and Privacy Commissioner of Ontario, and risk countermeasures.
- Demonstrate experience conducting Privacy Impact Assessments in a public sector context.
- Demonstrate knowledge of and experience with privacy-enhancing best practices.
- Demonstrate knowledge of and the ability to interpret and apply Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), its municipal equivalent, the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), and the Personal Health Information Protection Act (PHIPA), including their respective regulations and related jurisprudence.
- Demonstrate familiarity with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the US PATRIOT Act.
- Technical Knowledge — 30%

Policy Knowledge
- Demonstrate familiarity with the OPS Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services.
- Demonstrate a good understanding of related disciplines, including IT security, IT system design, privacy or security policy development, business architecture, legal processes, Freedom of Information administration, business analysis, risk management, and project management.





Operational Program and Business Design Skills
- Demonstrate the ability to lead, manage, or support the development of a PIA independently or as part of a team by directing and gathering input from specific individuals within the organization.
- Demonstrate knowledge of and the ability to create and understand data flow diagrams and business process diagrams.
- Recognize the need for and seek input from external experts as required.
- Demonstrate excellent communication skills when working with technical and business audiences and privacy experts.

Technology and Systems Knowledge
- Apply analytical skills to understand the current and future access and privacy implications of policies, decisions, and business initiatives.
- Demonstrate knowledge of information technology concepts and processes that impact the protection of personal information, including, but not limited to, Internet tools, system interfaces, information security, information architecture, and data flows.

Information and Record Keeping Knowledge
- Demonstrate experience developing risk assessment tools, methodologies, policies, and procedures to effectively manage personal information.
- Demonstrate knowledge of policies, directives, standards, business rules, procedures, and guidelines relating to records management, including classification, retention, and disposition of information.
- Demonstrate knowledge and understanding of the Accessibility for Ontarians with Disabilities Act (AODA) and related regulations and standards.
- Leadership and Communications — 30%
- Provide consultative advice and strategic guidance to ministries, management, personnel, and stakeholders on privacy legislation, regulations, policies, standards, and procedures.
- Lead PIA development and stakeholder engagement activities throughout the assessment lifecycle.
- Manage workloads, resource utilization, intake queues, priorities, and changing deadlines effectively.
- Provide leadership and guidance to staff involved in planning, setting objectives, and delivering privacy assessment activities.
- Lead client stakeholder management and serve as a primary point of contact for IT clients.
- Participate in cross-cluster, IPC, and Ministry research teams and working committees.
- Communicate privacy risks, compliance requirements, recommendations, and mitigation strategies clearly to technical teams, business stakeholders, privacy experts, and senior management.
- Digital Identity Frameworks and Standards — 5%
- Apply relevant knowledge of digital identity frameworks and standards in assessing privacy implications, information systems, data flows, and applicable privacy and security requirements.

Desirable Skills
- Professional certification in a related discipline, such as IT security or architecture.
- Experience providing education and training related to privacy.
- Knowledge of, and experience with, the policies and procedures of the Ontario government, including business case development, project approvals, and policy development.

How to Apply If you are interested and your profile matches the requirements, kindly send the following mandatory documents to [email protected] by Wednesday, October 14, 2026, at 10:00 AM EST.

Mandatory Documents

- Updated Resume in Word format (Mandatory)
- References (Mandatory)
- Expected Hourly Rate (Mandatory)
- Visa Status (Mandatory)
- LinkedIn ID (Mandatory)

Without the mandatory documents, we cannot submit a candidate. WhatsApp Group For daily job updates, you can also join our WhatsApp group using the link below:

Join our WhatsApp Group

Additional Information

Onsite – 5 days per week.

Email is the best way to reach us.

You have received this message either as a result of contacting our company to express interest in employment or as a result of posting your resume in a location that can be accessed by recruiters or HR specialists, which suggests an interest in being contacted about employment opportunities.

📌 – Privacy Impact Assessment (PIA) Specialist – Senior (Toronto)
🏢 S M Software Solutions
📍 Toronto