1. Lead and conduct Privacy Impact Assessments (PIAs) for new technologies, information systems, digital initiatives, programs, and policies to identify and mitigate privacy risks.
2. Robust knowledge of Ontario privacy legislation, including FIPPA, MFIPPA, PHIPA, and familiarity with federal PIPEDA, the US PATRIOT Act, and IPC Ontario jurisprudence.
3. Experience applying Public sector Privacy Impact Assessment processes and tools, privacy policies, directives, standards, and Fair Information Practices.
4. Assess privacy and security risks, interpret compliance requirements, and recommend privacy-enhancing practices and effective risk mitigation strategies.
5. Strong technical knowledge of IT security, information architecture, system interfaces, data flows, and IT system design.
6. Ability to develop and interpret data flow diagrams, business process diagrams,



and privacy risk assessment methodologies.
7. Provide strategic privacy advisory services to government ministries, stakeholders, technical teams, and management on legislative and policy compliance.
8. Demonstrated leadership, stakeholder management, and communication skills, including team coordination, workload management, and cross-functional collaboration.
9. Knowledge of records management, information classification, retention and disposition, Freedom of Information administration, and AODA requirements.
10. Experience with Ontario government policies, business case development, project approvals, privacy training, and Digital Identity Frameworks and Standards is an asset.

📌 Senior Privacy Impact Assessment (PIA) Specialist (Toronto)
🏢 ThoughtStorm
📍 Toronto