Work Arrangement: Onsite – 5 Days per Week

Client: Ministry of Public and Business Service Delivery and Procurement – RQ11693

Role Snapshot

Job Title: RQ11693 – Privacy Impact Assessment (PIA) Specialist – Senior

Client: Ministry of Public and Business Service Delivery and Procurement

Work Location: 222 Jarvis Street, Toronto, Ontario, Canada

Work Arrangement: Onsite – 5 Days per Week

Estimated Start Date: October 12, 2026

Estimated End Date: March 31, 2027

Business Days: 95.00

Extension: Probable after the initial mandate

Hours: 7.25 hours per day

Security Level: No Clearance Required

Must Have

Excellent knowledge of privacy and security concepts, trends, and issues, including their impact on business processes and the ability to interpret and communicate principles and compliance requirements.

Knowledge of, and experience researching and applying, relevant information privacy laws, regulations, jurisprudence, particularly as they relate to the Information and Privacy Commissioner of Ontario, and risk countermeasures.

Familiarity with the Ontario Public Service (OPS) Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services.

Good understanding of related disciplines, including IT security, IT system design, privacy or security policy development, business architecture, legal processes, Freedom of Information administration, business analysis, risk management, and project management.

Analytical skills to understand the current and future access and privacy implications of policies, decisions, and business initiatives.

Knowledge of information technology concepts and processes that impact the protection of personal information, including Internet tools, system interfaces, information security, information architecture, and data flows.

Nice to Have

Knowledge of, and experience with, the policies and procedures of the Ontario government, including business case development, project approvals, and policy development.

Description
The successful candidate will guide, influence, and lead the planning and development of Privacy Impact Assessments (PIAs) to evaluate whether new technologies, information systems, or proposed programs and policies meet legal privacy requirements and address client concerns.

Requirements include ensuring that programs comply with the Freedom of Information and Protection of Privacy Act (FIPPA), Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Health Information Protection Act (PHIPA), and other provincial, federal, and municipal privacy laws, as well as applicable regulations, program statutes, Management Board of Cabinet Directives, corporate policies, and internationally established Fair Information Practices. The role may involve working with other jurisdictions and the broader public sector.

Major Responsibilities

Demonstrate knowledge of and the ability to interpret and apply Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), its municipal equivalent, the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), the Personal Health Information Protection Act (PHIPA), their respective regulations, and related jurisprudence.

Provide consultative advice and guidance on laws, regulations, policies, standards, and procedures to clusters, ministries, management, personnel, and key groups.





Lead the development of Privacy Impact Assessments that evaluate whether new technologies, information systems, proposed programs, or policies meet legal and policy privacy requirements, determine and mitigate risks, and address client concerns.

Manage PIA service resource utilization and workload management, and manage the PIA intake queue to optimize resource allocation.

Provide guidance and leadership to staff responsible for planning work, setting objectives, and directing staff activities while managing unexpected changes to deadlines and work demands.

Lead client and stakeholder management as the primary point of contact for IT clients, providing strategic advice on project provisioning and policy to support informed business decisions.

Lead and/or participate in cross-cluster, Information and Privacy Commissioner (IPC), and Ministry research teams and working committees mandated to review and implement key strategic Freedom of Information (FOI), Privacy, and Information and Information Technology (I⁢) commitments.

Analyse policy proposals from ministries and Cabinet submissions to assess and evaluate I⁢ implications and develop privacy strategies and planning approaches.

Lead or support the development of Privacy Impact Assessments that evaluate whether recent technologies, information systems, proposed programs, or policies meet legal and policy privacy requirements, determine and mitigate risks, and address client concerns.

Ensure that programs comply with provincial, municipal, federal, and private-sector access and privacy legislation, as well as relevant regulations, statutes, OPS policies, directives, standards, guidelines, and internationally accepted Fair Information Practices.

Experience And Skill Set Requirements

Privacy Assessment Experience, Policy and Legislative Requirements — 35%

Demonstrate excellent knowledge of privacy and security concepts, trends, and issues.

Understand the impact of privacy and security requirements on business processes and demonstrate the ability to interpret and communicate principles and compliance requirements.

Research and apply relevant information privacy laws, regulations, jurisprudence, particularly as it relates to the Information and Privacy Commissioner of Ontario, and risk countermeasures.

Demonstrate experience conducting Privacy Impact Assessments in a public sector context.

Demonstrate knowledge of and experience with privacy-enhancing best practices.

Demonstrate knowledge of and the ability to interpret and apply Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), its municipal equivalent, the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), and the Personal Health Information Protection Act (PHIPA), including their respective regulations and related jurisprudence.

Demonstrate familiarity with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the U.S. PATRIOT Act.

Technical Knowledge — 30%

Policy Knowledge





Demonstrate familiarity with the OPS Privacy Impact Assessment Process and Tools released by the Ontario Ministry of Government Services.

Demonstrate a good understanding of related disciplines, including IT security, IT system design, privacy or security policy development, business architecture, legal processes, Freedom of Information administration, business analysis, risk management, and project management.

Operational Program and Business Design Skills

Demonstrate the ability to lead, manage, or support the development of a PIA independently or as part of a team by directing and gathering input from specific individuals within the organization.

Demonstrate knowledge of and the ability to create and understand data flow diagrams and business process diagrams.

Recognize the need for and seek input from external experts as required.

Demonstrate excellent communication skills when working with technical and business audiences and privacy experts.

Technology and Systems Knowledge

Apply analytical skills to understand the current and future access and privacy implications of policies, decisions, and business initiatives.

Demonstrate knowledge of information technology concepts and processes that impact the protection of personal information, including, but not limited to, Internet tools, system interfaces, information security, information architecture, and data flows.

Information and Record Keeping Knowledge

Demonstrate experience developing risk assessment tools, methodologies, policies, and procedures to effectively manage personal information.

Demonstrate knowledge of policies, directives, standards, business rules, procedures, and guidelines relating to records management, including classification, retention, and disposition of information.

Demonstrate knowledge and understanding of the Accessibility for Ontarians with Disabilities Act (AODA) and related regulations and standards.

Leadership and Communications — 30%

Provide consultative advice and strategic guidance to ministries, management, personnel, and stakeholders on privacy legislation, regulations, policies, standards, and procedures.

Lead PIA development and stakeholder engagement activities throughout the assessment lifecycle.

Manage workloads, resource utilization, intake queues, priorities, and changing deadlines effectively.

Provide leadership and guidance to staff involved in planning, setting objectives, and delivering privacy assessment activities.

Lead client stakeholder management and serve as a primary point of contact for IT clients.

Participate in cross-cluster, IPC, and Ministry research teams and working committees.

Communicate privacy risks, compliance requirements, recommendations, and mitigation strategies clearly to technical teams, business stakeholders, privacy experts, and senior management.

Digital Identity Frameworks and Standards — 5%

Apply relevant knowledge of digital identity frameworks and standards in assessing privacy implications, information systems, data flows, and applicable privacy and security requirements.

Desirable Skills

Professional certification in a related discipline, such as IT security or architecture.

Experience providing education and training related to privacy.

Knowledge of, and experience with, the policies and procedures of the Ontario government, including business case development, project approvals, and policy development.

#J-18808-Ljbffr

📌 – Privacy Impact Assessment (PIA) Specialist – Senior (Ontario)
🏢 S M Software Solutions
📍 Ontario