Senior Manager, Health Information Governance & Privacy

Why Fred Victor?  For 130 years, Fred Victor has been a leader in helping people rebuild their lives in Toronto. Our mission is to improve the health, income and housing stability of people experiencing poverty and homelessness. We are committed to ending homelessness, one person at a time.
The Senior Manager, Health Information Governance & Privacy reports directly to the Vice President, Programs and Services and is responsible for providing strategic and operational leadership for Fred Victor's privacy management program, health information governance framework, and compliance with the Personal Health Information Protection Act (PHIPA) and other applicable privacy legislation. This role provides organization-wide leadership in the development, implementation, monitoring, and continuous improvement of policies, procedures, governance structures, and practices related to the collection, use, disclosure, retention, safeguarding, and disposal of personal health information and other sensitive personal information.
The Senior Manager, Health Information Governance & Privacy serves as the organization's subject matter expert on health information privacy, consent management, information sharing, privacy risk management, access and disclosure processes, privacy investigations, documentation quality, and information governance. The role supports the organization in meeting its obligations as a Health Information Custodian and promoting a culture of privacy, accountability, confidentiality, and information stewardship.

Working in a complex and evolving environment, this role collaborates closely with operational leadership, Quality, Information Technology, Human Resources, legal counsel, external partners, and service delivery teams to identify privacy risks, strengthen compliance, support strategic initiatives, and improve information management practices across the organization.
Does this sound like work you want to be a part of?  We offer a supportive and collaborative working environment, an opportunity to join a diverse team of caring professionals and a chance to make a difference. With over 75 programs and 25 locations across the city, there are lots of opportunities to grow your career with us.

What You Will Do:

Health Information Governance Leadership    Lead the development, implementation, and continuous improvement of Fred Victor's Health Information Governance Framework.
Develop policies, standards, procedures, and controls governing personal health information and sensitive client information.
Support organizational accountability for information governance, privacy, records management, and information stewardship.
Provide strategic advice to leadership regarding privacy, information governance, regulatory compliance, and organizational risk.
Monitor legislative, regulatory, and sector developments affecting privacy and information management and provide recommendations for organizational action.
Develop annual privacy and information governance priorities, objectives, reporting mechanisms, and work plans.
Privacy Program Leadership and Compliance    Lead the day-to-day operation of the organization's privacy management program.
Develop, review, and maintain privacy policies, procedures, forms, guidelines, and educational resources.
Provide consultation and guidance regarding privacy legislation, consent, confidentiality, information sharing, and disclosure practices.
Ensure compliance with PHIPA and other applicable privacy legislation and regulatory requirements.
Support organizational readiness for audits, accreditation reviews, compliance assessments, and regulatory inquiries.
Identify privacy risks and develop mitigation strategies to reduce organizational exposure.
Access, Correction and Information Disclosure Management    Oversee requests for access to, correction of, and disclosure of personal health information.
Ensure compliance with legislative timelines and disclosure requirements under PHIPA.
Review and approve complex disclosure matters and access requests involving elevated legal, privacy, or reputational risk.
Ensure appropriate verification of identity, authority, consent, and legal authorization before disclosure.
Maintain systems for tracking requests, disclosures, decisions, and supporting documentation.
Provide guidance regarding subpoenas, warrants, court orders, law enforcement requests, and third-party information requests, in collaboration with legal counsel where required.
Privacy Incident, Breach and…