Position: Privacy Impact Assessment (PIA) Specialist - Senior
Requisition Number: RQ11603
Assignment Number: A2903126
Client: Government Services Integration Cluster
Ministry: Ministry of Public and Business Service Delivery and Procurement
Start Date: Oct 01, 2026
End Date: Mar 31, 2027
Location: 20 Dundas St W, Toronto, ON M5G 2H1
Work Schedule: Onsite (5 days per week)
Hours: 7.25 hours per day (8:00 AM to 5:00 PM; excluding breaks)
MANDATORY SKILLS
- Experienced in privacy legislation including Freedom of Information and Protection of Privacy Act (FIPPA), Personal Health Information Protection Act (PHIPA), the Personal Information Protection and Electronic Documents Act (PIPEDA)
- Experienced in conducting privacy assessments involving personal information, citing examples in resume.
- Experienced in leading and conducting privacy assessments with involving online and/or digital solutions.
- Lead and conducted assessments involving personal health information involving third party solutions (e.g. private sector or non-profit application solutions) and/or service integration providers.
Nice to have: OPS or Public Sector exp.
EXPERIENCE AND SKILL SET REQUIREMENTS
40% - Privacy Assessment Experience, Policy and Legislative Requirements
- Experienced in privacy legislation including Freedom of Information and Protection of Privacy Act (FIPPA), Personal Health Information Protection Act (PHIPA), the Personal Information Protection and Electronic Documents Act (PIPEDA)
- Experienced in conducting privacy assessments involving personal information, citing examples in resume.
- Experienced in leading and conducting privacy assessments with involving online and/or digital solutions.
- Lead and conducted assessments involving personal health information involving third party solutions (e.g. private sector or non-profit application solutions) and/or service integration providers.
- Experienced working with policy development teams; reviewing and comparing policies and legislation to make informed recommendations to ensure adequate privacy protections and considerations are addressed with in policy/legislation.
30% - Technical understanding
- Experience with privacy risks and conducting PIAs and the unique security and privacy challenges associated with various platforms.
- Demonstrated experience and familiarity with strong security, encryption and privacy protection approaches to digital solutions, including web based and backend integrations via API or similar approaches.
- Experience with privacy risks and conducting PIAs associated with integration between legacy systems, web applications, digital and cloud-based solutions to obtain, retrieve and synchronize information.
- Familiar with cloud-based technologies including the security and privacy considerations, limitations, and best practices for data protection.
- Experience, knowledge and understanding of privacy protection standards and best practices, business, information and security architecture principles and emerging technology related to the protection of privacy and personal information.
20% - Leadership and Communications
- Demonstrated strong communication and engagement skills with ability to lead teams in discovery sessions to elicit details of technical solutions, business processes and/or policies, strong writing skills to document findings, recommendation, etc.
- Demonstrated ability to interpret both technical (e.g. architecture design documents, process flows, state transition diagrams, etc.) and non-technical documentation to conduct assessment of impacts and to develop mitigation strategies.
- Strong organizational and time management skills to manage multiple and concurrent requests in an agile and highly dynamic work environment setting.
- Strong presentation abilities to communicate findings, recommendations, etc. to senior management and executives to inform decision making; able to communicate Page 6 of 12 complex problems/issues in simple terms.
5% - Digital Identity Frameworks and Standards
- Experience in developing, applying and/or evaluating digital identity trust frameworks.
5% - OPS experience
- Prior experience with leading and conducting multiple PIAs in OPS setting/ environment, including demonstrated knowledge and experience with OPS processes, existing templates and expectations to obtain approvals/sign off.
