RQ08034 - Privacy Impact Assessment PIA Specialist - Senior

Description:

• Assess Ontario privacy legislation and regulations against current 911 patient needs and opportunities associated with new digital integration solutions in Central Ambulance Communication Centres.
  
• Recommend regulatory changes to enable privacybydesign solutions for 911 patients and to enhance the 911 patient care experience.
  
• Lead stakeholder consultations and provide technical expertise to develop the access and privacy tools to fulfil these recommendations including the development of I & IT requirements implementation of security mechanisms pertaining to the creation collection storage access retrieval and disclosure of Personal Health Information (PHI).
  

General Skills:

• Demonstrated experience and competency to prepare comprehensive reports options analyses briefing materials and presentations and propose responses on privacy issues.
  
• Experience in consultation and negotiation to gain support for policy and program initiatives.
  
• Demonstrated experience and competency to develop effective relationships with senior management and stakeholders.
  
• Strong oral and written communications and principles and methods to draft papers reports options analyses correspondence briefing notes speeches and materials.
  

Requirements

Experience and Skill Set Requirements:

Must Haves:

• Assess Ontario privacy legislation and regulations against current patient needs and opportunities associated with new digital integration solutions.
  
• Recommend regulatory changes to enable privacybydesign solutions for patients and to enhance patient care experience
  
• 8 years of experience as a privacy expert including:
  

• Managing privacy risks in the collection use and disclosure of Personal Health Information (PHI)
  
• Leading endtoend operational risk assessments selecting risk methodologies
  
• Identifying privacy compliance gaps priorities dependencies and redundancies and SUPER IMPORTANT
  
• recommending process remediation or simplification
  

Skill Set Requirements:

Technical Skills:

• 10 years experience in privacy impact assessment methodologies tools and techniques.
  
• Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection.
  
• Practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e. information management knowledge
  
• management intellectual property/copyright information technology and electronic service delivery channels).
  
• Practical knowledge of broad political legal fiscal social and governance dimensions to ensure that privacy principles directives notices and directions are considered in the development of new programs/initiatives.
  
• 8 years of experience as a privacy expert including:
  

• Managing privacy risks in the collection use and disclosure of Personal Health Information (PHI)
  
• Leading endtoend operational risk assessments selecting risk methodologies
  
• Identifying privacy compliance gaps priorities dependencies and redundancies and
  
• recommending process remediation or simplification
  
• Implementing information privacy best practices
  

Analytical and Conceptual Skills:

• Demonstrated experience and competency to resolve complex issues identify options and make recommendations.
  
• Demonstrated experience and competency to analyze policy proposals to assess / identify I&IT business implications and develop strategic policy planning options and impact analyses for clients.
  
• Demonstrated experience and competency to acquire and apply relevant legislation regulations and directives to ensure proposed initiatives conform to legislation.
  
• Demonstrated experience and competency to identify and evaluate emerging privacy issues changes and trends in current and future that impact government policy directions.
  
• Experience in program analysis/evaluation techniques to assess the impact of proposed or new/changed policies/fiscal or governance arrangements for new programs.
  

Public Sector/ Healthcare Experience:

• Demonstrated previous public sector experience and has familiarity with the privacy and deidentification guidelines set by IPC.
  
• Experience in working on multiple projects at the same time.
  
• Experience in working on multiyear projects.