Our client is looking for PIA Specialist to Lead or support the planning and development of Privacy Impact Assessments (PIAs) to evaluate whether new technologies, information systems, programs, and policies meet legal and policy privacy requirements. Identify and mitigate privacy risks, address client concerns, and provide strategic advice to support informed business decisions. Assess compliance with applicable provincial, municipal, federal, and private-sector access and privacy legislation, regulations, program statutes, Ontario Public Service (OPS) policies, Management Board of Cabinet directives, standards, guidelines, and internationally accepted Fair Information Practices. The role may involve collaboration with other jurisdictions and the broader public sector.
Key Responsibilities
- Lead the development of PIAs, gathering and coordinating input from business, technical, legal, and privacy stakeholders.
- Interpret and apply Ontario s Freedom of Information and Protection of Privacy Act (FIPPA), Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), and Personal Health Information Protection Act (PHIPA), including their regulations and related jurisprudence.
- Provide advice on privacy legislation, regulations, policies, standards, procedures, and risk mitigation measures to ministries, clusters, management, and staff.
- Manage PIA intake queues, workloads, and resource utilization to optimize service delivery.
- Provide leadership to staff by planning work, setting objectives, directing activities, and managing changing deadlines and demands.
- Act as the primary contact for IT clients, providing strategic advice on project provisioning, policy, and business decisions.
- Lead or participate in cross-cluster, ministry, and Information and Privacy Commissioner of Ontario (IPC) research teams and working committees supporting Freedom of Information (FOI), privacy, and information technology commitments.
- Analyze ministry policy proposals and Cabinet submissions to assess information technology implications and develop privacy strategies.
- Create and interpret data flow and business process diagrams.
- Identify when external expertise is required and coordinate specialist input.
Must-Haves
- Strong knowledge of privacy and security concepts and their impact on business processes.
- Ability to interpret and communicate privacy principles and compliance requirements.
- Experience researching and applying privacy legislation, regulations, and jurisprudence, particularly decisions of the Information and Privacy Commissioner of Ontario.
- Knowledge of privacy risk mitigation measures
- Familiarity with the Ontario Public Service (OPS) Privacy Impact Assessment Process and Tools.
- Understanding of IT security, system design, privacy and security policy, business architecture, legal processes, Freedom of Information administration, business analysis, risk management, and project management.
- Ability to assess the privacy implications of policies, decisions, and business initiatives.
- Knowledge of personal information protection across system interfaces, information security, information architecture, and data flows.
Nice-to-Haves
- Knowledge of Ontario government policies and procedures, including business case development, project approvals, and policy development.
- Professional certification in IT security, architecture, or a related discipline.
- Experience delivering privacy education and training.
