Senior Privacy Impact Assessment (PIA) Specialist

Toronto, ON
On-site
Posted Oct 16, 2026
1 position

Opens LinkedIn

Employment type: Contract
Experience level: Senior · 5+ years
Posting language: English
Working hours: 40 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Lead and conduct Privacy Impact Assessments for technologies, systems, initiatives, programs, and policies, identifying privacy risks and recommending mitigation strategies. Advise government ministries and cross-functional stakeholders on privacy compliance, coordinate assessment work, and support privacy training and project approvals.

Job details

Lead and conduct Privacy Impact Assessments (PIAs) for new technologies, information systems, digital initiatives, programs, and policies to identify and mitigate privacy risks. Strong knowledge of Ontario privacy legislation, including FIPPA, MFIPPA, PHIPA, and familiarity with federal PIPEDA, the US PATRIOT Act, and IPC Ontario jurisprudence. Experience applying Public sector Privacy Impact Assessment processes and tools, privacy policies, directives, standards, and Fair Information Practices. Assess privacy and security risks, interpret compliance requirements, and recommend privacy-enhancing practices and effective risk mitigation strategies. Strong technical knowledge of IT security, information architecture, system interfaces, data flows, and IT system design. Ability to develop and interpret data flow diagrams, business process diagrams, and privacy risk assessment methodologies. Provide strategic privacy advisory services to government ministries, stakeholders, technical teams, and management on legislative and policy compliance. Demonstrated leadership, stakeholder management, and communication skills, including team coordination, workload management, and cross-functional collaboration. Knowledge of records management, information classification, retention and disposition, Freedom of Information administration, and AODA requirements. Experience with Ontario government policies, business case development, project approvals, privacy training, and Digital Identity Frameworks and Standards is an asset.

What you’ll do

Requirements

Requires strong knowledge of Ontario privacy legislation and public-sector privacy assessment processes, policies, standards, and Fair Information Practices, along with familiarity with federal and U.S. privacy laws. Requires technical understanding of IT security, system design, data flows, and assessment diagrams, as well as leadership, communication, and stakeholder-management capabilities.