Privacy Impact Assessment (PIA) Specialist - Senior

at  Arthur Grand Technologies Inc

Arthur Grand Technologies is currently seeking a highly motivated and skilled Privacy Impact Assessment (PIA) Specialist – Senior for one of our clients.
Job Title: Privacy Impact Assessment (PIA) Specialist - Senior
Location: Toronto, Ontario (Hybrid – 2 days per month onsite, subject to change)
Duration: Long Term Contract

REQUIRED EXPERIENCE / EVALUATION CRITERIA:

1) Minimum 3 years’ health privacy experience conducting privacy impact assessments (PIAs) on medium to high complexity projects: 20 Points
2) Minimum 5 years’ direct operational level privacy experience in a health sector and/or IT environment or both: 20 Points
3) Minimum 5 years’ experience in developing privacy policies and procedures, requirements, or controls: 20 Points
4) Minimum 5 years’ experience drafting and reviewing privacy requirements for data sharing agreements: 15 Points
5) Familiarity with the Personal Health Information Protection Act (PHIPA), and requirements related to Health Information Network Provider (HINP) and Electronic Service Provider (ESP).: 10 Points
6) Familiarity with Application Programming Interface (API) functionality and management: 7.5 Points
7) Familiarity with Electronic Medical Record (EMR) or Pharmacy Management System (PMS) infrastructure, design, and data flows: 7.5 Points
Total: 100 Points

• The Privacy Specialist is responsible for the delivery of the privacy and authorities analysis, including management of issues and risks to ensure successful and on-time completion of deliverable.
• Gather and develop requirements in order to create and maintain the privacy and authorities analysis
• Articulate and prioritize issues and risks and recommends mitigation strategies for decision makers
• Conducting/Completing Privacy Impact Assessments and associated documentation
• Providing Privacy Consultation on a diverse range of complex, multi-stakeholder health privacy issues and Information Technology (IT) initiatives
• Identify and assess privacy risks, including developing risk mitigation plans
• Create or inform the creation of data flow diagrams and associated privacy controls and compliance requirements
• Reviewing and advising on agreements, including data sharing agreements
• Developing privacy requirements for new or changing components
• Providing privacy advisory and support to the product team