RQ00832 - Privacy Impact Assessment Specialist - Senior

Job summary

The Senior Privacy Specialist will lead privacy initiatives, conduct impact assessments, and provide advisory support for complex health and IT projects. They are responsible for developing privacy policies, managing privacy incidents, and ensuring compliance with PHIPA and FIPPA regulations.

Job details

Required Skills: Minimum 5 years direct operational level privacy experience preferably in a health sector and/or IT environment Minimum of 5 years’ health privacy experience conducting privacy impact assessments on medium to high complexity projects Minimum 5 years’ experience developing privacy policies and procedures, requirements or controls Holds an undergraduate or graduate degree in health, policy, IT, security, law or a related discipline Experience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset. Familiarity with OntarioMD EMR certification Familiarity with EMR or HIS infrastructure, design, and data flows Familiarity with Application Programming Interface (API) functionality and management Responsibilities: The Senior Privacy Specialist will lead and support various initiatives, including, but not limited to: Develop privacy policies and procedures Conduct privacy impact assessments for low to high complex initiatives May be required to support investigating privacy incidents, patient inquiries, and privacy requests of any kind Identify and assess privacy risks Provide privacy advisory support to business teams Lead and/or participate in Agency, regional or provincial committees or project teams as the privacy Subject Matter Expert Identify privacy requirements Develop strong relationships with various internal and external partners to foster a culture of privacy Respond and provide advice and legislative interpretation for information and access requests, consent management requests, complaints or inquiries, appeals and privacy issues under the Personal Health Information Protection Act, 2004 and the Freedom of Information and Protection of Privacy Act. Support privacy program projects and activities to improve the efficiency and effectiveness of the Privacy Office Develop and deliver privacy training for The Agency Other duties as required Desired Skills: Recognized security certification or designation is an asset Knowledge of technology architecture and infrastructure, digital health solutions and services, enterprise and corporate IT including information and cyber security preferred Requires Competencies: Completion of a university undergraduate or master’s degree in health, policy, IT, security, law or a related discipline Demonstrated knowledge and experience of access and privacy requirements and practices, preferably related to the health and public sectors Excellent knowledge of privacy and security concepts, trends, and issues. This will include an understanding of their impact on business processes, as well as skill with interpretation and communication of principles and compliance requirements Knowledge and ability to interpret Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) Knowledge and ability to interpret Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) Analytical skills to understand the current and future access and privacy implications of policies, decisions and business initiatives Thorough understanding of “privacy-by-design” and best practices Experience with conducting and/or providing oversight for Privacy Impact Assessments and Privacy Threshold Assessments, including developing privacy requirements, risk mitigation plans, corporate policies and developing and/or delivering training content Working knowledge of digital health technologies and information security industry standards Excel in a fast-paced and project focused environment Exceptional analytic and creative problem-solving abilities Good understanding of related disciplines, such as IT system design, policy development (privacy or security), business architecture, legal processes, Freedom of Information administration, business analysis, risk management, project management Knowledge of Information Technology concepts and processes that impact the protection of personal information, including (but not limited to) Internet tools, system interfaces, information security, information architecture and data flows Excellent Communication skills both verbal and written, and strong stakeholder engagement skills Time Management, with the ability to manage tight deadlines and prioritize multiple projects Evaluation Criteria: Minimum 5 years’ health care experience conducting privacy assessments and reviews on medium to high complexity projects 20 Points Minimum 5 years direct operational level privacy experience in a health sector and/or IT environment or both 20 Points Minimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls 20 Points Minimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements 15 Points Experience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset. 10 Points Familiarity with Application Programming Interface (API) functionality and management 8 Points Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows 7 Points Requirements Deliverables: Provide Privacy Consultation on a diverse range of complex, multi-partner health privacy issues and Information Technology (IT) initiatives throughout the product/service development and deployment life cycle Conduct/complete Privacy Threshold and Impact Assessments and associated documentation Develop and inform privacy risk mitigation plans Create or inform the creation of data flow diagrams and associated privacy controls and compliance requirements Review and advise on agreements, including data sharing agreements Privacy by Design reviews of documentation and privacy advice related to digital health initiatives Privacy program activities as assigned Must Haves: Minimum 5 years’ health care experience conducting privacy assessments and reviews on medium to high complexity projects 20 Points Minimum 5 years direct operational level privacy experience in a health sector and/or IT environment or both 20 Points Minimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls 20 Points Minimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements 15 Points Experience with the Personal Health Information Protection Act, 2004 (PHIPA), including requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP). Experience working with prescribed statuses is considered an asset. 10 Points Familiarity with Application Programming Interface (API) functionality and management 8 Points Familiarity with Electronic Medical Record (EMR) or Hospital Information System (HIS) infrastructure, design, and data flows 7 Points

What you’ll do

The Senior Privacy Specialist will lead privacy initiatives, conduct impact assessments, and provide advisory support for complex health and IT projects. They are responsible for developing privacy policies, managing privacy incidents, and ensuring compliance with PHIPA and FIPPA regulations.

Requirements

Candidates must possess at least 5 years of direct operational privacy experience in the health or IT sector, along with a relevant undergraduate or graduate degree. Proficiency in conducting privacy impact assessments, interpreting privacy legislation, and managing data privacy requirements is essential.

Listed skills

• Compliance · Preferred
• Project management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Privacy Impact Assessment
• PHIPA
• FIPPA
• Privacy Policy Development
• Data Privacy
• Risk Mitigation
• Health Information Management
• Information Security
• Digital Health
• Stakeholder Engagement
• Compliance
• Data Flow Analysis
• Privacy-by-design
• Legislative Interpretation
• Project Management
• API Management
• Patient Communication
• Healthcare Industry Knowledge
• Privacy Impact Assessments
• Industry Standards
• Digital Health Technologies
• Policy Development
• IT Security
• Business Architecture
• Analytical Skills
• Microsoft Excel
• Application Programming Interface (API)
• Business Analysis
• Management
• Business Process
• Hospital Information Systems
• Communication
• Computer Networks
• Information Technology
• Creative Problem Solving
• Cyber Security
• Data Flow Diagram
• Data Sharing
• Emergency Medical Responder (EMR)
• Electronic Medical Record
• Information Architecture
• Risk Management
• Medical Privacy
• Service Development
• Systems Design
• Time Management

Job areas

• Healthcare
• Technology
• Legal
• Security & Safety
• Government & Public Sector
• Assessment Specialist
• Curriculum and Instructional Designer / Developer
• Education Methods Specialists
• Instructional Coordinators

More jobs from Maarut Inc