Senior Specialist, Privacy

At Ontario Health, we are committed to developing a strong organizational culture that connects and inspires all team members across the province. Our vision is that together, we will be a leader in health and wellness for all. Our mission is to connect the health system to drive improved and equitable health outcomes, experiences and value. How we work together is reflected through our five values: integrity, inspiration, tenacity, humility and care.

• Comprehensive health coverage from day one, with fully paid medical, dental, and vision benefits to support you and your family’s health.
• Flexible health care or wellness spending accounts, plus an inclusive program to support your overall well-being.
• A premium defined benefit pension plan, ensuring long-term financial security.
• Competitive vacation entitlement that encourages time to rest and recharge.
• Three personal days and two float days annually, providing added flexibility to support work‑life balance, in addition to vacation days.
• Ongoing learning and career development opportunities designed to help you grow, advance, and thrive in your profession.
• A collaborative, values‑driven workplace where integrity, care, humility, inspiration, and tenacity shape everything we do.
• Opportunities to participate in Communities of Inclusion, fostering belonging, equity, and the sharing of diverse perspectives across our team.

• Conduct medium- to high-complexity privacy impact assessments, identify potential or actual risks, and prepare practical recommendations and mitigation strategies.
• Provide privacy advisory support and legislative interpretation for programs, projects, access requests, consent management requests, complaints, inquiries, appeals and privacy issues under the Personal Health Information Protection Act, 2004 and the Freedom of Information and Protection of Privacy Act.
• Act as a privacy subject matter expert on Ontario Health, regional or provincial committees and project teams, helping identify privacy requirements, controls and solutions.
• Support the investigation and resolution of privacy incidents, patient inquiries and privacy requests.
• Research, develop and recommend improvements to privacy policies, procedures, tools and program activities that strengthen the effectiveness of the Privacy Office.
• Build collaborative relationships with internal and external stakeholders, including IT, Development and enterprise teams, to promote cross‑portfolio alignment and foster a culture of privacy.
• Develop and deliver privacy training and awareness activities for Ontario Health teams.
• Perform other duties as required.

• Hold a bachelor’s degree in health, policy, IT, security, law or a related discipline or equivalent education/experience.
• Master’s or equivalent education/experience is preferred.
• A minimum of 3 years’ relevant privacy experience, including for example prior experience conducting privacy impact assessments or providing privacy assurance services.
• Health Privacy or public sector experience is preferred.
• Recognized privacy designation (CIPP/C) is preferred.
• Recognized security certification or designation is an asset.
• Direct operational level privacy experience preferably in a health sector and/or IT environment is considered an asset.

• Demonstrated knowledge and experience of access and privacy requirements and practices, preferably related to the health and public sectors.
• Ontario’s Personal Health Information Protection Act, 2004 (PHIPA).
• Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA).
• Thorough understanding of “privacy‑by‑design” and best practices.
• Experience with conducting and/or providing oversight for Privacy Impact Assessments including developing privacy requirements, risk mitigation plans, corporate policies and developing and/or delivering training content.
• Knowledge of technology architecture and infrastructure, digital health solutions and services, enterprise and corporate IT including information and cyber security preferred.
• Working knowledge of digital health technologies and information security industry standards.
• Excel in a…