Who we are
We are an organization comprised of industry thought leaders who are passionate about health data and want to make a difference in the health care field. We are an independent, not-for-profit organization and together with our partners we provide essential information on Canada's health systems, enabling decisions that lead to healthier Canadians. As a valued member of the CIHI team, you and your work will have a pivotal role in the evolution of Canada's health care systems.
CIHI is recognized as an exceptional place to work that embraces diversity, respect, integrity, collaboration and innovation. Learn about our Equity, Diversity and Inclusion Strategy and the work being done to create a more inclusive and welcoming organization by focusing on how we learn, govern and practise.
At CIHI, we recognize what matters to our employees. Some of the benefits of working at CIHI include
- HOOPP Pension Plan (Defined Benefits Pension)
- Retirement Planning Program
- Generous vacation days for permanent and long-term contracts
- Work-life balance
- Career Planning Program
- Learning and Professional Development Program
- Flexible benefits program from your first day on the job for permanent and long-term contracts
Why is this role important?
Reporting to the Senior Privacy Consultant the Program Consultant, Privacy and Legal Services works with team members in the Privacy Office as well as organizational leaders to ensure the organization develops, implements and maintains a comprehensive privacy program in compliance with legislative and legal requirements, as well as industry best practices.
What you'll do
1. Acts as the subject matter expert providing strategic privacy advice to program areas as well as internally to the department on matters relating to the collection, use, disclosure, retention and disposition of personal information and personal health information, and the amendment, implementation and application of privacy policies within CIHI.
2. Provides strategic advice and recommendations to Privacy and Legal senior management on a broad range of key privacy issues and priorities to support CIHI’s Privacy Program. Conducts research on privacy topics, related legislation, privacy commissioners’ investigative results and guidance, gathers information from diverse sources and develops business cases as required.
3. Responds to privacy incidents and breaches as part of the Privacy and Security Incident Management Protocol, by investigating, and making recommendations for corrective action to senior management.
4. Guides program areas in the drafting of Privacy Impact Assessments (PIA) by providing advice, guidance and privacy expertise to program areas and projects, including the application of Privacy and Security risk management methodology.
5. Leads planned external audits and other related ongoing compliance monitoring activities, analyzes and presents results to senior management.
6. Consults, in collaboration with the Information Security office, on CIHI’s Third-party Data Request program to ensure compliance with CIHI’s privacy policies and that data destruction requirements are met by third parties.
7. Work with internal stakeholders to promote awareness and increase adoption of privacy best practices, by leading aspects of the annual privacy training, development resources and awareness campaigns.
8. Collaborates with Information Security to ensure alignment between security and privacy practices.
9. Monitors emerging issues, trends and developments in the area of privacy protection of interest to CIHI, including decisions of federal, provincial/territorial Privacy Commissioners / Ombudsmen, and identifies and advises on implications for CIHI.
10. Leads and participates in other relevant Privacy projects and initiatives as required.
2. Provides strategic advice and recommendations to Privacy and Legal senior management on a broad range of key privacy issues and priorities to support CIHI’s Privacy Program. Conducts research on privacy topics, related legislation, privacy commissioners’ investigative results and guidance, gathers information from diverse sources and develops business cases as required.
3. Responds to privacy incidents and breaches as part of the Privacy and Security Incident Management Protocol, by investigating, and making recommendations for corrective action to senior management.
4. Guides program areas in the drafting of Privacy Impact Assessments (PIA) by providing advice, guidance and privacy expertise to program areas and projects, including the application of Privacy and Security risk management methodology.
5. Leads planned external audits and other related ongoing compliance monitoring activities, analyzes and presents results to senior management.
6. Consults, in collaboration with the Information Security office, on CIHI’s Third-party Data Request program to ensure compliance with CIHI’s privacy policies and that data destruction requirements are met by third parties.
7. Work with internal stakeholders to promote awareness and increase adoption of privacy best practices, by leading aspects of the annual privacy training, development resources and awareness campaigns.
8. Collaborates with Information Security to ensure alignment between security and privacy practices.
9. Monitors emerging issues, trends and developments in the area of privacy protection of interest to CIHI, including decisions of federal, provincial/territorial Privacy Commissioners / Ombudsmen, and identifies and advises on implications for CIHI.
10. Leads and participates in other relevant Privacy projects and initiatives as required.
What you'll bring to the table
• Undergraduate degree in Health Information Management, Public Policy, Business Administration, Information Security, or another related field. An equal combination of education and related experience may be considered.
• Certified Information Privacy Professional (CIPP) required, another related Privacy certification including CIPP/C CIPM may be considered.
• 5 – 7 years’ recent job-related experience
• Previous operational experience applying Privacy by Design, the Personal Health Information Protection Act (PHIPA) legislation in the health care sector
• Demonstrated experience in writing policies and supporting documents or procedures.
• Knowledge of the health sector, research, AI and information technology
• Experience with annual reviews by the Information and Privacy Commissioner/Ontario for prescribed entities and persons is an asset.
• Experience in preparing education materials and facilitating training.
• Excellent analytical, organizational, research, and presentation skills.
• Evidence of ongoing commitment to continuous quality improvement
• Excellent interpersonal and communication skills, both written and oral with the ability to communicate complex ideas in simple terminology.
• Ability to collaborate as part of a team.
• Experience with conducting audits is an asset.
• Fluency in English is required, bilingualism in both official languages is an asset.
• Certified Information Privacy Professional (CIPP) required, another related Privacy certification including CIPP/C CIPM may be considered.
• 5 – 7 years’ recent job-related experience
• Previous operational experience applying Privacy by Design, the Personal Health Information Protection Act (PHIPA) legislation in the health care sector
• Demonstrated experience in writing policies and supporting documents or procedures.
• Knowledge of the health sector, research, AI and information technology
• Experience with annual reviews by the Information and Privacy Commissioner/Ontario for prescribed entities and persons is an asset.
• Experience in preparing education materials and facilitating training.
• Excellent analytical, organizational, research, and presentation skills.
• Evidence of ongoing commitment to continuous quality improvement
• Excellent interpersonal and communication skills, both written and oral with the ability to communicate complex ideas in simple terminology.
• Ability to collaborate as part of a team.
• Experience with conducting audits is an asset.
• Fluency in English is required, bilingualism in both official languages is an asset.
To find out more about this role and other exciting opportunities visit our website at www.cihi.ca and check out our 'Careers' section.
We thank all those who apply, however, only candidates selected for an interview will be contacted.
As part of CIHI’s applicant screening process, we complete a comprehensive pre-employment background check for all potential hires. This includes a criminal record check, credit report, social media, and education verification.
At CIHI we are committed to fostering an inclusive, barrier-free and accessible environment. Part of this commitment includes arranging accommodations to ensure an equitable opportunity to participate in the recruitment and selection process. If you require an accommodation, we will work with you to meet your needs.
Please note the CIHI Recruiting Team uses email to communicate with applicants. Please make sure your profile has an updated email address that is checked regularly, including the junk/spam mail folder, as we send time sensitive emails (i.e. testing and interview bookings).
APPLY HERE
APPLY HERE