Responsibilities:
· Required to lead and support the development of a Privacy Impact Assessment (PIA) report, which evaluates whether new technologies, information systems or proposed programs and policies meet legal and privacy requirements, determines and guides risk mitigations, and addresses clients’ concerns.
· These requirements include ensuring program compliance with applicable privacy statutes (provincial, federal, or municipal) and private sector access and privacy legislation, as well as relevant regulations, program statutes, OPS policies, Management Board of Cabinet Directives, standards, guidelines and internationally established Fair Information Principles and industry best practices.
· Following several methodologies (PIA methodology, business analysis, risk analysis principles, information management lifecycle) to prepare in-depth report(s) tailored to the target audience (e.g., Privacy Impact Assessment Report, briefing notes for senior management) that analyses existing and proposed policies, programs and technical upgrades for gaps, risks and impacts on an individual’s personal information and privacy controls. Findings and recommendations for action are identified for business owners to consider and action.
· Provides consultative advice, guidance and approaches on laws, regulations, policies, standards, or procedures to clusters & ministries, management, personnel, or key groups. May involve work with other jurisdictions and the broader public sector.
Must Have Experience:
· Experienced in privacy legislation including Freedom of Information and Protection of Privacy Act (FIPPA), Personal Health Information Protection Act (PHIPA), the Personal Information Protection and Electronic Documents Act (PIPEDA)
· Experienced working with policy development teams; reviewing and comparing policies and legislation to make informed recommendations to ensure adequate privacy protections and considerations are addressed within policy/legislation.
· Experience with privacy risks and conducting PIAs and the unique security and privacy challenges associated with various platforms.
· Experience with privacy risks and conducting PIAs associated with integration between legacy systems, web applications, digital and cloud-based solutions to obtain, retrieve and synchronize information.
· Demonstrated strong communication and engagement skills with ability to lead teams in discovery sessions to elicit details of technical solutions, business processes and/or policies, strong writing skills to document findings, recommendation, etc.
Nice to have:
