Privacy Impact Assessment (PIA) Specialist - Senior at Innosystech Inc in Regent Park, City of Toronto. Skills: Compliance, FIPPA, PHIPA, PIPEDA, Privacy Impact Assessments. Apply on NeverHard.
Company
Innosystech Inc
Location
Regent Park, City of Toronto
Type
not_specified
Required skills:
Compliance
FIPPA
PHIPA
PIPEDA
Privacy Impact Assessments
Privacy legislation
Risk Management
Stakeholder Management
Job Title: Privacy Impact Assessment (PIA) Specialist - Senior
Location: Toronto, Ontario
Work Model: Onsite
Description / Responsibilities / Skills
Must Have
Experience with privacy legislation including FIPPA, PHIPA and PIPEDA
Experience conducting privacy assessments involving personal information
Experience leading and conducting privacy assessments for online or digital solutions
Experience conducting privacy assessments involving personal health information with third-party or integrated solutions
Experience working with privacy risks, compliance and mitigation strategies
Description
Responsibilities
Lead and support development of Privacy Impact Assessments (PIAs) for programs, systems and technologies
Evaluate compliance with provincial, federal and private sector privacy legislation
Identify privacy risks and develop mitigation strategies
Assess impact of new technologies, systems and policies on personal information
Ensure alignment with OPS standards, policies and fair information practices
Conduct stakeholder consultations and gather inputs for PIA development
Develop documentation including findings, recommendations and mitigation approaches
Support compliance with security, privacy and regulatory requirements
Provide guidance on privacy best practices and compliance strategies
Communicate privacy concepts and findings to both technical and non-technical stakeholders
General Skills
Strong knowledge of privacy, security and compliance principles
Experience interpreting privacy legislation and regulatory frameworks
Strong analytical and problem-solving skills
Ability to assess risks related to business processes and systems
Strong documentation and reporting capabilities
Excellent verbal and written communication skills
Strong stakeholder engagement and facilitation skills
Ability to work independently and within teams
Strong organizational and time management skills
Desirable Skills
Professional certifications in IT security, architecture or privacy
Experience delivering privacy training or awareness programs
Experience working with Ontario government policies and procedures
Experience with business case development and project approvals
OPS or public sector experience
Skills
Privacy Assessment Experience and Legislative Knowledge - 30%
Experience conducting privacy assessments involving personal and health information
Knowledge of FIPPA, PHIPA and PIPEDA legislation
Experience assessing privacy requirements for digital and integrated systems
Experience working with third-party and service integration solutions
Experience reviewing policies and ensuring compliance with privacy legislation
Technical Understanding - 30%
Experience evaluating privacy risks across web, mobile, cloud and legacy systems
Understanding of information architecture, data flows and system integrations
Experience with mobile and digital solutions security and privacy considerations
Knowledge of encryption, data protection and privacy-by-design principles
Familiarity with API-based integrations and system interfaces
Leadership and Communication - 30%
Experience leading workshops and stakeholder consultations
Strong communication skills for documenting findings and recommendations
Experience presenting insights to senior stakeholders and executives
Ability to translate complex technical and legal concepts
Strong problem-solving and decision-making abilities
Specialized and OPS Knowledge - 10%
Experience working with OPS PIA processes and tools
Knowledge of digital identity frameworks and standards (e.g., NIST, OpenID, SAML)
Experience with privacy assessments in public sector environments
Familiarity with Digital Identity Trust frameworks (PCTF, eIDAS)