Auditor - EMR Privacy

Job summary

The Auditor is responsible for conducting privacy audits and quality assurance checks within the EMR system to ensure compliance with health privacy legislation. They also monitor AI Scribe usage and provide guidance to staff to maintain the integrity and confidentiality of patient health information.

Job details

The Auditor – EMR Privacy is responsible for ensuring the confidentiality and integrity of patient health information within the Electronic Medical Record (EMR) system, primarily OSCAR. This position plays a critical role in promoting and monitoring compliance with all relevant privacy legislation and the Sioux Lookout First Nations Health Authority (SLFNHA) Privacy Policy. The Auditor – EMR Privacy executes regular scheduled and ad-hoc privacy audits, quality assurance checks, and AI Scribe compliance reviews to support the delivery of high-quality, secure clinical services. This position involves frequent interaction with the Privacy Officer, Health Information Systems Manager, allied health professionals, SLFNHA department supervisors, external agencies, and the communities we serve. Accountability The Auditor – EMR Privacy is directly accountable to the Officer - Privacy and works collaboratively with the Manager - Health Information Systems regarding EMR system functionality, data access, and security configurations. 2026 Salary Range: Annual $56,576 - $75,992 / Hourly $31.086 - $41.754 Position Type: Full-Time Permanent Posting Type: This job posting is a new position. Closing Date: October 1, 2026 Qualifications • Minimum Grade 12 and/or Diploma or Degree in Healthcare Informatics, Health Information Management, or a related field, or equivalent working experience. • A minimum of one (1) to three (3) years of recent, relevant experience working in a healthcare or regulated environment, with a focus on data auditing, privacy compliance, or quality assurance. • Demonstrated understanding of health privacy legislation (e.g., PHIPA, PIPEDA or OCAP®) and best practices for safeguarding electronic health information. • Experience working with an Electronic Medical Record (EMR) system; direct experience with OSCAR or Mustimuhw (MIS) is highly desirable. • Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint). • Excellent time management, organizational, and communication skills (written and verbal). • Strong problem-solving and analytical skills with the ability to interpret complex audit logs and policy requirements. • Ability to work independently and as part of a team in a dynamic healthcare setting. • Detail-oriented with a high degree of accuracy, integrity, and discretion when handling sensitive and confidential information. • Adaptable and able to thrive in a fast-paced environment. • Persons of First Nations ancestry will be given preference (OHRC, Part II, Special Employment) • Ability to communicate in one of the First Nations dialects of the Sioux Lookout region is an asset. • Ability to perform the requirements of the role on a regular basis Roles & Responsibilities • Work efficiently within the Electronic Medical Record system, primarily OSCAR. Experience with the Mustimuhw Information System (MIS) – EMR is considered an asset. • Conduct scheduled and ad-hoc privacy audits within the EMR system to monitor for inappropriate access, use, or disclosure of Protected Health Information (PHI). • Analyze audit logs, system reports, and access activity to identify potential breaches or policy violations, and report findings to the Privacy Officer in a timely manner. • Prepare, maintain, and submit formal audit checklists, activity logs, and summary reports for the Privacy Officer. • Assist the Privacy Officer with privacy investigations related to the EMR system and support additional PHIPA compliance audits as required. • Perform quality assurance checks on EMR documentation and data entry to ensure accuracy, completeness, and consistency of patient records. • Identify recurring documentation errors or deficiencies that could impact patient care, and provide non-clinical feedback and documentation guidance to EMR users in collaboration with the Health Information Systems Manager. • Ensure EMR workflow processes align with established clinical and administrative protocols. • Advise staff regarding privacy best practices for working within the EMR, including but not limited to access, correction, retention, and disclosure of personal health information. • Manage AI Scribe compliance by auditing user activity to ensure clinical documentation tools are used according to organizational standards. • Verify that clinicians have obtained and documented patient consent before utilizing AI Scribe technologies, and ensure all AI Scribe users have signed required privacy agreements and data-sharing protocols. • Monitor and enforce the use of SLFNHA-approved AI Scribe tools, preventing use of unauthorized third-party recording or transcription software. • Correct errors on charts and documents and address misfiled medical records following the principles of PHIPA. • Investigate discrepancies and errors in records by contacting appropriate SLFNHA departments, nursing stations, or health partners. • Contribute to the review, development, and implementation of EMR-specific security and privacy policies and procedures to preserve the confidentiality of health information and monitor compliance. • Participate in the development and delivery of EMR privacy training and awareness programs for staff. • Developing and maintaining a network of contacts, both inside and outside the organization, with people who may be able to supply information, assistance, or support for work-related goals. • Taking the initiative to exceed (external and internal) client expectations constantly and consistently. • Ensuring that work accomplished is accurate in all relevant aspects. • Making decisions and/or taking action that recognizes the organization’s unique integrated pattern of behaviors and characteristics. • Creating honest, trusting, and successful working relationships with others by consistently demonstrating competence and reliability and representing what is best about the organization through demonstrated principles, actions, and communications. • Perform any other duties or tasks assigned by the Privacy Officer or Health Information Systems Manager, consistent with the scope and objectives of the role. Sioux Lookout First Nations Health Authority focuses on hiring Indigenous employees whenever possible. Candidates are encouraged to self-identify on their application. Self-identification is voluntary and the information is used to assist SLFNHA in hiring Indigenous people from the region whenever possible and to support candidates in their application. We offer competitive and comprehensive employment benefits to Full-Time employees: * Pension plan * Fitness reimbursement program * Comprehensive insurance coverage * Professional development opportunities * Relocation assistance

What you’ll do

The Auditor is responsible for conducting privacy audits and quality assurance checks within the EMR system to ensure compliance with health privacy legislation. They also monitor AI Scribe usage and provide guidance to staff to maintain the integrity and confidentiality of patient health information.

Requirements

Candidates must have a diploma or degree in a related field and one to three years of experience in healthcare data auditing or privacy compliance. Proficiency in EMR systems and a strong understanding of health privacy legislation like PHIPA or PIPEDA are required.

Benefits

• Pension plan • Fitness reimbursement program • Comprehensive insurance coverage • Professional development opportunities • Relocation assistance

Listed skills

• Time management · Preferred
• Problem solving · Preferred
• Quality assurance · Preferred
• Communication Skills · Preferred
• Microsoft Office Suite · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Data auditing
• Privacy compliance
• Quality assurance
• Electronic medical record (EMR)
• OSCAR
• Mustimuhw
• PHIPA
• PIPEDA
• OCAP
• Microsoft office suite
• Time management
• Analytical skills
• Problem-solving
• Communication skills
• Documentation guidance
• Audit log analysis
• Clinical Documentation
• Compliance Auditing
• Accountability
• Productivity Improvement
• Workflow Management
• Data Access
• Analytical Skills
• Microsoft Access
• Microsoft Excel
• Artificial Intelligence
• Auditing
• Health Informatics
• Management Information Systems
• Medical Records
• Checklists
• Communication
• Confidentiality
• Data Auditing
• Data Entry
• Data Sharing
• Electronic Medical Record
• Health Information Management
• Health Information Systems (HIS)
• Problem Solving
• Legislation
• Microsoft Office
• Medical Privacy
• Personal Health Records
• Microsoft PowerPoint
• Protected Health Information
• Quality Assurance
• Time Management
• Investigation
• Transcribing

Job areas

• Healthcare
• Data & Analytics
• Security & Safety
• Administrative
• EMR Project Manager
• Auditor (General)
• Accountants
• Accountants and Auditors