• Lead and conduct Privacy Impact Assessments (PIAs) for new technologies, information systems, digital initiatives, programs, and policies to identify and mitigate privacy risks.
• Strong knowledge of Ontario privacy legislation, including FIPPA, MFIPPA, PHIPA, and familiarity with federal PIPEDA, the US PATRIOT Act, and IPC Ontario jurisprudence.
• Experience applying Public sector Privacy Impact Assessment processes and tools, privacy policies, directives, standards, and Fair Information Practices.
• Assess privacy and security risks, interpret compliance requirements, and recommend privacy-enhancing practices and effective risk mitigation strategies.
• Robust technical knowledge of IT security, information architecture, system interfaces, data flows, and IT system design.
• Ability to develop and interpret data flow diagrams, business process diagrams,



and privacy risk assessment methodologies.
• Provide strategic privacy advisory services to government ministries, stakeholders, technical teams, and management on legislative and policy compliance.
• Demonstrated leadership, stakeholder management, and communication skills, including team coordination, workload management, and cross-functional collaboration.
• Knowledge of records management, information classification, retention and disposition, Freedom of Information administration, and AODA requirements.
• Experience with Ontario government policies, business case development, project approvals, privacy training, and Digital Identity Frameworks and Standards is an asset.

📌 Senior Privacy Impact Assessment (Toronto)
🏢 ThoughtStorm
📍 Toronto