RQ00832 - Privacy Impact Assessment Specialist - Senior Term 125 DaysNumber of Positions 1Work Experience 10+ YearsCity TorontoState/Province OntarioM4 CJob Description Required Skills:Minimum 5 years direct operational level privacy experience preferably in a health sector and/or IT environmentMinimum of 5 years’ health privacy experience conducting privacy impact assessments on medium to high complexity projectsMinimum 5 years’ experience developing privacy policies and procedures, requirements or controlsHolds an undergraduate or graduate degree in health, policy, IT, security, law or a related disciplineExperience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset.Familiarity with Ontario MD EMR certificationFamiliarity with EMR or HIS infrastructure, design, and data flowsFamiliarity with Application Programming Interface (API) functionality and managementResponsibilities:The Senior Privacy Specialist will lead and support various initiatives, including, but not limited to:Develop privacy policies and proceduresConduct privacy impact assessments for low to high complex initiativesMay be required to support investigating privacy incidents, patient inquiries, and privacy requests of any kindIdentify and assess privacy risksProvide privacy advisory support to business teamsLead and/or participate in Agency, regional or provincial committees or project teams as the privacy Subject Matter ExpertIdentify privacy requirementsDevelop strong relationships with various internal and external partners to foster a culture of privacyRespond and provide advice and legislative interpretation for information and access requests, consent management requests, complaints or inquiries, appeals and privacy issues under the Personal Health Information Protection Act, 2004 and the Freedom of Information and Protection of Privacy Act.Support privacy program projects and activities to improve the efficiency and effectiveness of the Privacy OfficeDevelop and deliver privacy training for The AgencyOther duties as requiredDesired Skills:Recognized security certification or designation is an assetKnowledge of technology architecture and infrastructure, digital health solutions and services, enterprise and corporate IT including information and cyber security preferredCompletion of a university undergraduate or master’s degree in health, policy, IT,



security, law or a related disciplineDemonstrated knowledge and experience of access and privacy requirements and practices, preferably related to the health and public sectorsExcellent knowledge of privacy and security concepts, trends, and issues. This will include an understanding of their impact on business processes, as well as skill with interpretation and communication of principles and compliance requirementsKnowledge and ability to interpret Ontario’s Personal Health Information Protection Act, 2004 (PHIPA)Knowledge and ability to interpret Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA)Analytical skills to understand the current and future access and privacy implications of policies, decisions and business initiativesThorough understanding of “privacy-by-design” and best practicesExperience with conducting and/or providing oversight for Privacy Impact Assessments and Privacy Threshold Assessments, including developing privacy requirements, risk mitigation plans, corporate policies and developing and/or delivering training contentWorking knowledge of digital health technologies and information security industry standardsExcel in a fast-paced and project focused environmentExceptional analytic and creative problem-solving abilitiesGood understanding of related disciplines, such as IT system design, policy development (privacy or security), business architecture, legal processes, Freedom of Information administration, business analysis, risk management, project managementKnowledge of Information Technology concepts and processes that impact the protection of personal information, including (but not limited to) Internet tools, system interfaces, information security, information architecture and data flowsExcellent Communication skills both verbal and written, and strong stakeholder engagement skillsTime Management,



with the ability to manage tight deadlines and prioritize multiple projectsEvaluation Criteria:Minimum 5 years’ health care experience conducting privacy assessments and reviews on medium to high complexity projects 20 PointsMinimum 5 years direct operational level privacy experience in a health sector and/or IT environment or both 20 PointsMinimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls 20 PointsMinimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements 15 PointsExperience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset. 10 PointsFamiliarity with Application Programming Interface (API) functionality and management 8 PointsFamiliarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows 7 PointsRequirements Provide Privacy Consultation on a diverse range of complex, multi-partner health privacy issues and Information Technology (IT) initiatives throughout the product/service development and deployment life cycleConduct/complete Privacy Threshold and Impact Assessments and associated documentationDevelop and inform privacy risk mitigation plansCreate or inform the creation of data flow diagrams and associated privacy controls and compliance requirementsReview and advise on agreements, including data sharing agreementsPrivacy by Design reviews of documentation and privacy advice related to digital health initiativesPrivacy program activities as assignedMust Haves:Minimum 5 years’ health care experience conducting privacy assessments and reviews on medium to high complexity projects 20 PointsMinimum 5 years direct operational level privacy experience in a health sector and/or IT setting or both 20 PointsMinimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls 20 PointsMinimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements 15 PointsExperience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset. 10 PointsFamiliarity with Application Programming Interface (API) functionality and management 8 PointsFamiliarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows 7 Points#J-18808-Ljbffr

📌 Rq00832 - Privacy Impact Assessment Specialist - Senior (Toronto)
🏢 Maarut
📍 Toronto