Senior Privacy Impact Assessment (PIA) Specialist Location & Work Mode: Toronto; Upto 5 days onsite Important Note: This is a 6-month contract with a flexible, project-based workload. Work requirements may vary from week to week based on project milestones and stakeholder reviews. Some weeks may require multiple working days, while others may require fewer or no days. Candidates should be comfortable with this flexible engagement model. Brief Description: We are seeking a Senior Privacy Impact Assessment (PIA) Specialist to lead and support the development of Privacy Impact Assessments (PIAs) for an interactive digital platform. The role focuses on evaluating the collection, use, disclosure, storage, and processing of personal information across user account management, classroom enrollment, public portals, and online services while ensuring compliance with applicable privacy legislation, privacy-by-design principles, and organizational policies. The successful candidate will work closely with legal, business, UX, and technical teams to identify privacy risks, recommend mitigation strategies, and develop privacy documentation that supports secure and compliant digital services.

Education Bachelor's degree in Information Technology, Computer Science, Information Security, Law, Public Administration, Business, or a related discipline (or equivalent experience). Professional certification in Privacy, Information Security, or Architecture (e.g., CIPP/C, CIPM, CISSP) is considered an asset.

Required Skills Experience leading or supporting Privacy Impact Assessments (PIAs) for digital platforms, websites, online services, or user account systems. Strong knowledge of privacy legislation including FIPPA, MFIPPA, PHIPA, PIPEDA, applicable regulations, and internationally accepted Fair Information Practices. Strong understanding of Privacy-by-Design principles. Experience reviewing website features, user journeys, and account setup flows to identify personal information collection, use, storage, disclosure, and sharing. Experience developing privacy notices, consent language, privacy policies, and user-facing privacy communications. Ability to assess privacy risks involving youth users, teacher-managed accounts, public display names, classroom enrollment, and self-registration workflows. Experience translating legal and policy requirements into practical business, design, and technical guidance. Strong analytical, documentation, stakeholder engagement, and communication skills. Experience working with legal counsel, UX teams, business stakeholders, and technical teams. Knowledge of data flows, business process diagrams, information security, records management, and risk assessment methodologies. Public sector privacy assessment experience is considered an asset.

Responsibilities Lead or support the development of Privacy Impact Assessments (PIAs) for digital platforms and associated business processes. Evaluate compliance with applicable provincial, federal, municipal, and private-sector privacy legislation, policies, directives, and standards. Assess collection, use, disclosure, storage, and processing of personal information across digital services. Identify privacy risks and recommend mitigation strategies aligned with Privacy-by-Design principles. Review user journeys, account registration, classroom enrollment, public portal features, and data collection processes. Develop privacy requirements analysis, data flow documentation, privacy risk assessments, and privacy recommendations. Draft privacy notices, consent language, and user-facing privacy explanations for different audiences. Collaborate with legal, UX, business, communications, and technical teams to ensure privacy compliance. Prepare privacy documentation, stakeholder guidance, and implementation recommendations. Support ongoing privacy compliance and continuous improvement initiatives.