Privacy Analyst

at  Pacific Blue Cross

ABOUT PACIFIC BLUE CROSS

Pacific Blue Cross (PBC) has been British Columbia’s leading benefits provider for over 80 years. We are an independent, not-for-profit society with strong roots in BC’s health care system. We provide health, dental, life, disability, and travel coverage to 1 in 3 British Columbians through employee group plans and individual plans.
We are fueled by a commitment to keep health care sustainable for all British Columbians. Through our PBC Health Foundation, we fund projects that improve health outcomes directly related to mental health and wellbeing as well as the prevention and/or management of chronic disease. We are interested in finding people who want to make a difference and who are looking to grow their career with us.

JOB SUMMARY

Under the broad direction of the Chief Privacy Officer and Legal Counsel, the Privacy Analyst requires a high level of confidentiality and plays a key role in supporting PBC’s corporate privacy management program. The Privacy Analyst assists in ensuring compliance with all legal requirements and internal privacy protection policies applicable across PBC while collaborating cross-functionally to mitigate privacy risk, supporting innovation, and instilling best practices. This Privacy Analyst will support the Chief Privacy Officer and Legal Counsel with the following functions: investigating privacy breaches and/or incidents, conducting Privacy Impact Assessments (PIAs), responding to privacy inquiries, processing information access requests, and delivering privacy training.

QUALIFICATIONS

• High school graduation, or equivalent.
• Completion of a Business Communications course (36 hours), or equivalent.
• Demonstrated proficiency in intermediate Excel, Word, and PowerPoint.
• Completion of an intermediate Excel course (18 hours), or equivalent.
• Completion of an intermediate Word course (18 hours), or equivalent.
• Completion of an intermediate PowerPoint course (12 hours), or equivalent.
• 4 years of related experience researching and writing formal documents/reports (such as policy research and/or analysis, proposal or grant writing, etc.) including 2 years of experience in a Privacy Analyst or an equivalent position interpreting the British Columbia Personal Information Protection Act (PIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA), or interpreting the equivalent privacy legislation in other jurisdictions.
• Demonstrated experience preparing reports to support policy analysis and decision-making for privacy.
• Demonstrated experience drafting PIAs for technological systems that adhere to the guidelines for private sector entities under privacy legislation (e.g., PIPA and FIPPA).
  Note:
  Responding to significant privacy breaches/incidents may occasionally require ad hoc work outside of normal business hours (e.g., nights and weekends).
  If you’re excited about taking on this opportunity, we invite you to apply today and start the conversation with us about this position.
  Please apply via our website this week at http://www.pbchbs.com/company/careers/
  While we thank all applicants for their interest, only short-listed candidates will be contacted.

• Reviews privacy breaches and/or incidents, and where appropriate investigates them. Investigations may include interviewing external stakeholders (e.g., members) and internal stakeholders (e.g., employees, managers, and other stakeholders), determining the root cause, identifying the appropriate mitigation measures, drafting privacy incident reports, and maintaining the corporate privacy incident log. The Privacy Analyst will escalate significant breaches and/or incidents to the Chief Privacy Officer and Legal Counsel, as needed.Conducts and reviews PIAs of both routine and technologically complex internal and external systems, programs, and initiatives - in conjunction with other internal stakeholders - to assist in assessing new or redesigned existing systems, programs, and initiatives, as directed.
• Provides privacy information and responds to both routine and complex privacy inquiries from internal and external stakeholders. Reviews requests, searches for the appropriate records, redacts records as needed, and prepares response letters, as needed.
• Conducts research and analysis related to ongoing privacy law compliance in order to provide advice and recommendations for developing policy and supporting PBC initiatives, as needed. Drafts, revises, and maintains authorization forms, privacy policies and procedures, and other materials for privacy compliance. Maintains up-to-date knowledge on privacy legislation and best practices, and all areas of job operation through continuous education activities.
• 
  
  
  
• Supports the preparation of documents for various internal and external stakeholders at PBC including reports for committees, management, and the Board of Directors, as directed. Attends various meetings on behalf of the Chief Privacy Officer and Legal Counsel, as needed.Delivers education and training on privacy to internal stakeholders, as directed. Supports the revision, update, and maintenance of privacy training materials.

• Updates and maintains PBC’s various databases and registries for privacy compliance management, including a PIA directory and the database of corporate privacy policies and procedures.
• 
  
  
  
• Performs other ad hoc duties, as required.