Closed listing
Privacy Analyst
- Winnipeg, MB, Canada
Hybrid
Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Full-time
- Workplace
- Hybrid
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Position Number: 20065842
Posting End Date: October 6, 2026
City: Winnipeg
Employer: Shared Health
Site: Shared Health - Newport Bldg 1800-330 Portage
Department / Unit: Privacy
Job Stream: Non-Clinical
Union: Non Union
Anticipated Start Date: 11/02/2026
FTE: 1.00
Anticipated Shift: Days
Work Arrangement: Hybrid
Daily Hours Worked: 7.75
Annual Base Hours: 2015
Shared Health leads the planning and coordinates the integration of patient- centered clinical and preventive health services across Manitoba. The organization also delivers some province-wide health services and supports centralized administrative and business functions for Manitoba health organizations.
Position Overview
The Provincial Lead, Legal Services provides legal advice to Shared Health, WRHA programs and facilities, while also serving in a provincial lead and coordinate capacity.
The Chief Privacy Officer, reporting to the Provincial Lead, Legal Services, is responsible for the administration and compliance with privacy legislation including The Personal Health Information Act (PHIA), The Freedom of Information and Protection of Privacy Act (FIPPA), The Personal Information Protection of Electronic Documents Act (PIPEDA), The Mental Health Act (as it pertains to access and privacy), The Health Governance and Accountability Act, The Protecting Children Information Sharing Act, The Public Health Act, The Vulnerable Persons Living With a Mental Disability Act (as it pertains to access and privacy) along with other applicable legislation as they relate to access and privacy.
The Privacy Analyst has direct responsibilities for ensuring that Shared Health and the WRHA are compliant with access and privacy legislation with respect to the collection, use, disclosure, retention and destruction of personal information (PI) and personal health information (PHI).
The Privacy Analyst (Compliance) reports to Shared Health, Manager, Privacy, who is responsible for managing the Privacy Auditing Program, who in turn reports to the Shared Health, Chief Privacy Officer.
Main Function:
Reporting to the Chief Privacy Officer, the position ensures systemic compliance with statutory obligations set out in PHIA, FIPPA and related legislation by:
- Managing access to information requests (PHIA/FIPPA).
- Review and provide guidance on research requests involving Personal Health Information (PHI) and Personal Information (PI) where Shared Health or the WRHA is the trustee.
- Leading development and maintenance of access and privacy policies and guidelines, including stakeholder engagement and cross jurisdictional research to ensure compliance with PHIA and FIPPA.
- Leading, coordinating and reviewing record of user activity (RUA) audits across electronic systems managed or maintained by Shared Health or the WRHA.
- Advising on agreements, including SPAs, RAs, DSAs, IMAs etc.
- Oversee the completion of Privacy Impact Assessments (PIAs) for repositories containing Personal Health Information (PHI) and Personal Information (PI) where Shared Health or the WRHA is the trustee.
- Providing guidance and support on matters related to access and privacy to privacy officers, programs and regional health authorities.
- Assisting privacy officers, sites and programs related to privacy breach investigations.
- Developing and delivering training, awareness and compliance monitoring activities.
- Conducting cross-jurisdictional research on matters relating to access and privacy.
- Participating on various committees serving as a privacy subject matter expert.
- Strong knowledge of privacy laws specifically PHIA, FIPPA, PIPEDA and related legislation.
- Demonstrated experience and understanding of the Manitoba health system.
- Experience with:
- Privacy and Security policies, procedures and standards.
- Privacy audit analysis and management.
- Privacy Breach/Incident investigation, management and reporting.
- Risk mitigation and management plans.
- Privacy Impact Assessments (PIAs).
- Healthcare research involving personal health information (PI).
- Electronic information systems used within health care and data governance.
- Health care administrative/record management experience an asset.
- Proven analytical and problem-solving skills.
- Minimum 5 years’ experience applying privacy legislation (preferably healthcare).
- Minimum 3 years’ experience in policy development and implementation.
- Undergraduate University Degree in Public Administration, Health Information Management, Project Management, Information/Computer Technology, healthcare management or other relevant discipline.
- A combination of education and experience may be considered.
Not applicable
Qualifications And Skills
- The provincial health system in Manitoba has adopted the LEADS in a Caring Environment framework.
- Strong working knowledge of privacy laws and health information systems.
- Demonstrated investigative, analytical, and audit capabilities.
- Established knowledge of electronic information systems used within health care.
- Proven ability for exercising sound and impartial judgment in conflict situations
- Possesses strong interpersonal skills and effectively collaborates with challenging stakeholders and/or team members.
- Maintains strong listening skills, identifying key insights from both expressed and unspoken information while understanding underlying intent and behavior.
- Demonstrated strong problem-solving skills, with attention to detail while maintaining a focus on the broader picture.
- Ability to interpret legislation and apply it in complex environments.
- Strong communication, facilitation, presentation, and stakeholder engagement skills.
- Ability to work independently and manage competing priorities.
- High level of professionalism, discretion, and judgment.
- Strong organizational and documentation skills.
- May be required to work safely in a typical computerized office environment with frequent meetings.
- May be required to travel throughout the service area requiring a valid Manitoba driver’s license and use of a personal motor vehicle.
Interested candidates should select the "Apply" icon below to upload their cover letter, resume and copy of licenses/certification.
This position requires a current satisfactory Criminal Records Check (including Vulnerable Sector Search), Child Abuse Registry Check and Adult Abuse Registry Check as conditions of employment. The successful candidate will be responsible for any service charges incurred. A security check is considered current if it was obtained no more than six (6) months prior to the start of employment.
Please note that an employee is not permitted to hold two or more positions in Shared Health that combine to equal more than 1.0 FTE.
Shared Health values and supports employment equity and workplace diversity and encourages all qualified individuals to apply. We thank all applicants but only those selected for an interview will be contacted.
We welcome applications from people with disabilities. Accommodations are available upon request during the assessment and selection process.
Manitoba healthcare employers, in partnership with the Indigenous community, are committed to increasing the representation of Indigenous People within all levels of our workforce. Indigenous applicants are encouraged to apply and to voluntarily self-identify as being of Indigenous descent in their cover letter/application.
More about this job
Responsibilities
Ensure Shared Health and WRHA compliance with privacy and access legislation, including managing information requests, reviewing research requests, and developing policies and guidance. Lead privacy audits and impact assessments, advise on information-sharing agreements, support breach investigations, and deliver training and compliance monitoring.
Requirements
Requires an undergraduate degree in a relevant discipline or an equivalent combination of education and experience, with at least five years applying privacy legislation and three years in policy development and implementation. Candidates should have strong knowledge of Manitoba health privacy laws and health information systems, along with demonstrated audit, investigative, analytical, communication, and stakeholder collaboration skills.
Skills
- Privacy Law Compliance
- Access to Information Requests
- Privacy Auditing
- Privacy Breach Investigations
- Privacy Impact Assessments
- Policy Development
- Risk Management
- Health Information Systems
- Data Governance
- Legislative Interpretation
- Research Privacy Review
- Stakeholder Engagement
- Analytical and Problem-Solving Skills
- Communication and Facilitation
- Records Management
- Audit and Investigation
Visa sponsorship
Not detected in the job text
Categories
- Healthcare
- Legal
- Government & Public Sector
- Management & Leadership
- Data & Analytics
Keywords
- PHIA
- FIPPA
- PIPEDA
- Personal Health Information
- Personal Information
- Access to Information
- Privacy Compliance
- Privacy Auditing Program
- Record of User Activity Audits
- Privacy Impact Assessments
- Privacy Breach Investigations
- Privacy and Security Policies
- Risk Mitigation
- Data Governance
- Health Information Systems
- Electronic Information Systems
- Healthcare Research
- Information-Sharing Agreements
- Service Provider Agreements
- Research Agreements
- Data-Sharing Agreements
- Information Management Agreements
- Records Management
- Legislative Interpretation
- Compliance Monitoring
- Stakeholder Engagement
- Manitoba Health System
- LEADS in a Caring Environment