We are seeking an experienced Senior Privacy Impact Assessment Specialist to provide dedicated privacy subject matter expertise across complex digital health and IT initiatives. In this role, you will be responsible for conducting comprehensive Privacy Impact Assessments (PIAs) and Privacy Threshold Assessments (PTAs), embedding "Privacy-by-Desi
...
gn" principles into system architectures, and drafting robust privacy requirements for data-sharing agreements. You will evaluate data flows, assess compliance against healthcare privacy legislation, develop operational privacy policies, and advise multidisciplinary project teams to safeguard personal health information (PHI) across large-scale public sector IT solutions.
Location: Toronto, ON (Hybrid – Up to 3 days/week onsite)
Duration: 4-month contract.
Advantages
Digital Health Impact: Lead high-visibility privacy assessments safeguarding Personal Health Information across critical health data initiatives.
Modern IT Architecture Exposure: Analyze modern API-driven data flows, cloud integrations, and enterprise health information systems.
Specialized Privacy Scope: Direct operational governance involving HINP, ESP, and Privacy-by-Design frameworks.
Flexible Hybrid Model: Balance independent remote productivity with onsite collaboration in Toronto up to 3 days per week.
Responsibilities
Conduct Privacy Impact Assessments (PIAs) and Privacy Threshold Assessments (PTAs) for medium to high-complexity digital health and IT initiatives.
Embed "Privacy-by-Design" principles and risk mitigation strategies into software architecture, digital health platforms, and system interfaces.
Develop, review, and maintain operational privacy policies, procedures, standards, and technical privacy controls.
Draft, negotiate, and review privacy requirements and data protection provisions within data-sharing agreements, vendor contracts, and partner arrangements.
Analyze complex data flows, system integration models, API architectures, and data-exchange mechanisms to identify and mitigate privacy vulnerabilities.
Provide expert advisory support and legislative interpretation regarding the Personal Health Information Protection Act (PHIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA).
Provide guidance on compliance obligations specific to Health Information Network Providers (HINP) and Electronic Service Providers (ESP).
Support privacy incident investigations, inquiries, access and consent requests, and the resolution of privacy complaints.
Develop and deliver specialized privacy training and educational materials for project teams and operational personnel.
Qualifications
Public Sector Privacy Experience: Demonstrated operational privacy experience within a public sector environment (Strictly Required).
Health Sector Privacy Assessments: 5+ years of direct healthcare experience conducting Privacy Impact Assessments (PIAs) and reviews on medium to high-complexity initiatives (Strictly Required).
Operational Privacy Experience: 5+ years of direct operational-level privacy experience in a health sector and/or IT environment (Strictly Required).
Privacy Governance & Policies: 5+ years of experience developing privacy policies, procedures, technical requirements, or controls (Strictly Required).
Data Sharing Agreements: 5+ years of experience drafting, reviewing, and negotiating privacy requirements for data-sharing agreements (Strictly Required).
Healthcare Privacy Legislation (PHIPA): Deep knowledge of the Personal Health Information Protection Act (PHIPA), including compliance requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP) (Strictly Required).
Technical Infrastructure & Data Flows: Strong familiarity with Application Programming Interface (API) management and data flows within Electronic Medical Records (EMR) or Hospital Information Systems (HIS) (Strictly Required).
Education: University degree in Health, Public Policy, IT, Information Security, Law, or a related discipline (Strictly Required).
Nice-to-Have Assets:
Industry-recognized privacy or security credentials (e.g., CIPP/C, CIPM, CIPT, CISSP).
Familiarity with Ontario's Freedom of Information and Protection of Privacy Act (FIPPA).
Experience working with prescribed entities or prescribed persons under provincial health privacy regulations.
Summary
If you're interested in the "Senior Privacy Impact Assessment Specialist" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
This posting is for existing and upcoming vacancies.
show more
We are seeking an experienced Senior Privacy Impact Assessment Specialist to provide dedicated privacy subject matter expertise across complex digital health and IT initiatives. In this role, you will be responsible for conducting comprehensive Privacy Impact Assessments (PIAs) and Privacy Threshold Assessments (PTAs), embedding "Privacy-by-Design" principles into system architectures, and drafting robust privacy requirements for data-sharing agreements. You will evaluate data flows, assess compliance against healthcare privacy legislation, develop operational privacy policies, and advise multidisciplinary project teams to safeguard personal health information (PHI) across large-scale public sector IT solutions.
Location: Toronto, ON (Hybrid – Up to 3 days/week onsite)
Duration: 4-month contract.
Advantages
Digital Health Impact: Lead high-visibility privacy assessments safeguarding Personal Health Information across critical health data initiatives.
Modern IT Architecture Exposure: Analyze modern API-driven data flows, cloud integrations, and enterprise health information systems.
...
Specialized Privacy Scope: Direct operational governance involving HINP, ESP, and Privacy-by-Design frameworks.
Flexible Hybrid Model: Balance independent remote productivity with onsite collaboration in Toronto up to 3 days per week.
Responsibilities
Conduct Privacy Impact Assessments (PIAs) and Privacy Threshold Assessments (PTAs) for medium to high-complexity digital health and IT initiatives.
Embed "Privacy-by-Design" principles and risk mitigation strategies into software architecture, digital health platforms, and system interfaces.
Develop, review, and maintain operational privacy policies, procedures, standards, and technical privacy controls.
Draft, negotiate, and review privacy requirements and data protection provisions within data-sharing agreements, vendor contracts, and partner arrangements.
Analyze complex data flows, system integration models, API architectures, and data-exchange mechanisms to identify and mitigate privacy vulnerabilities.
Provide expert advisory support and legislative interpretation regarding the Personal Health Information Protection Act (PHIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA).
Provide guidance on compliance obligations specific to Health Information Network Providers (HINP) and Electronic Service Providers (ESP).
Support privacy incident investigations, inquiries, access and consent requests, and the resolution of privacy complaints.
Develop and deliver specialized privacy training and educational materials for project teams and operational personnel.
Qualifications
Public Sector Privacy Experience: Demonstrated operational privacy experience within a public sector environment (Strictly Required).
Health Sector Privacy Assessments: 5+ years of direct healthcare experience conducting Privacy Impact Assessments (PIAs) and reviews on medium to high-complexity initiatives (Strictly Required).
Operational Privacy Experience: 5+ years of direct operational-level privacy experience in a health sector and/or IT environment (Strictly Required).
Privacy Governance & Policies: 5+ years of experience developing privacy policies, procedures, technical requirements, or controls (Strictly Required).
Data Sharing Agreements: 5+ years of experience drafting, reviewing, and negotiating privacy requirements for data-sharing agreements (Strictly Required).
Healthcare Privacy Legislation (PHIPA): Deep knowledge of the Personal Health Information Protection Act (PHIPA), including compliance requirements for Health Information Network Providers (HINP) and Electronic Service Providers (ESP) (Strictly Required).
Technical Infrastructure & Data Flows: Strong familiarity with Application Programming Interface (API) management and data flows within Electronic Medical Records (EMR) or Hospital Information Systems (HIS) (Strictly Required).
Education: University degree in Health, Public Policy, IT, Information Security, Law, or a related discipline (Strictly Required).
Nice-to-Have Assets:
Industry-recognized privacy or security credentials (e.g., CIPP/C, CIPM, CIPT, CISSP).
Familiarity with Ontario's Freedom of Information and Protection of Privacy Act (FIPPA).
Experience working with prescribed entities or prescribed persons under provincial health privacy regulations.
Summary
If you're interested in the "Senior Privacy Impact Assessment Specialist" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
This posting is for existing and upcoming vacancies.
show more
