Senior Privacy Analyst

Position Summary

Reporting to the Director of Digital Innovation & Health Information Management the Senior Privacy Analyst is responsible for planning providing guidance interacting with key internal and external partners executing and participating in the execution of the cross-portfolio activities required to allow Quinte Health to maintain compliance with the Personal Health Information Protection Act 2004 (PHIPA).

The Senior Privacy Analyst will work closely with the Director Digital of Innovation & Health Information Management and other Quinte Health leaders and contributors and will use their project management expertise privacy program and operational experience and knowledge of privacy legal and regulatory requirements to develop a multi-year plan strategy and cadence to ensure Quinte Health readiness for the continuous changes and challenges in the health care sector. This role will also review update and implement policies practices and other mechanisms that address any new PHIPA amendments and enhance Quinte Healths privacy governance risk compliance and reporting capabilities.

This role is expected to build internal and external relationships and liaise extensively between and / or collaborate with members of the privacy team as well as portfolio and functional teams across Quinte Health including the Information Security Office (ISO) Analytics and Informatics Product and EHR Data Management Enterprise Risk and Compliance team and Legal Services.

The Senior Privacy Analyst will play an important role in championing a culture of privacy at Quinte Health and enabling compliance with Quinte Healths privacy requirements.

Required

Education and Experience

Hold an undergraduate degree in law business administration public administration or related professional degree (Physiotherapy Occupational Therapy Nursing CHIM IT) or equivalent education / experience with evidence of continuing professional development in privacy

Certified Information Privacy Professional or other relevant privacy designation is an asset

3 years relevant experience in privacy legal risk or compliance work including recent experience focused in public sector healthcare privacy is preferred.

5 years IT informatics Health Information Management or healthcare clinical work is an asset.

Experience with developing and / or leading privacy program and operational activities including for example privacy breach management training and awareness auditing and privacy risk management

Experience designing and implementing processes tools forms logs and other mechanisms to support compliance activities including the development of metrics dashboards and reports

Experience leading working groups projects or programs

Knowledge and Skills

Extensive knowledge of Ontarios Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act 2004 (PHIPA) privacy best practices and industry standards

Broad understanding of privacy concepts trends legislative and regulatory requirements and / or other emerging issues (such as de-identification event auditing and monitoring privacy maturity models etc.) and their potential impacts on goals priorities and activities within a privacy program

Demonstrated ability to conceive support and / or implement projects from start to finish while managing processes and expectations accordingly

Proficient in Microsoft based work environment i.e. Word PowerPoint Excel Teams

Strong organizational skills and ability to establish and manage priorities with a superior commitment to follow-through

Excellent interpersonal skills with ability to build collaborative relationships with QH business teams

Strong written communication skills including the ability to draft policies briefing notes compliance assessments etc. that involve technical privacy and compliance concepts

Ability to effectively communicate present and be comfortable speaking to QH senior executives clinicians external stakeholders and business teams on privacy compliance and risk management concepts

Duties

As a Senior Privacy Analyst you will have the opportunity to :

Develop multi-year plans strategies and cadence

Plan privacy team projects and / or support the planning and execution of portfolio or functional team projects in response to IPC recommendations

Lead the review update development and implementation of privacy policies and supporting artefacts such as procedures templates and logs required to meet compliance requirements and mature Quinte Healths privacy program in accordance with evolving industry privacy standards and best practices

Prepare and / or assist in the preparation of responses to any IPC comments inquiries and / or recommendations received and often within time sensitive timelines

Develop project management plans and support leaders and employees across Quinte Health to ensure indicators are collected logged and reported in accordance with Quinte Healths information practices and IPC requirements within specific and time sensitive timelines

Collaborate with members of the privacy team and other Quinte Health portfolios or functional teams (i.e. Information Security Enterprise Risk Management etc.) to ensure Quinte Health has integrated and harmonized information practices

Act as the subject matter expert as you coordinate and support the management and execution of program and operational activities required to ensure Quinte Healths compliance with IPC requirements including but not limited to governance and accountability privacy breach management privacy risk management and privacy training and awareness activities

Develop privacy audit plans and conduct privacy audits across Quinte Health portfolios on an ongoing basis and / or as scheduled by privacy policies and procedures

Lead and participate in privacy governance risk and compliance activities as required

Monitor and stay current on relevant privacy legal technology and other matters that may impact IPC requirements and Quinte Healths privacy program and risk posture.

To assist the organization to implement sustain monitor and improve a comprehensive privacy program in a complex healthcare environment.

Provide guidance as a subject matter expert to Digital Shared Services and / or Information Technology vendors on the design maintenance and operation of electronic information systems containing personal health information (PHI) and personal information (PI) to ensure they are compliant with relevant privacy legislation.

Maintains strong listening skills and can draw out information by hearing what has been said / not said and understanding the underlying meaning behind the speakers words and behavior.

Represents Quinte Privacy on various regional committees and working groups.

At Quinte Health our four hospitals unite under the core values of Imagine Its You Value Everyone We All Make a Difference and Stronger Together . We work as one team to enhance lives improve access to high-quality care and build healthier communitiesright where people need it most.

Quinte Healths four hospitals are the heart of our communities delivering exceptional care close to home. As one unified team were passionate about improving lives and expanding access to high-quality healthcare. Our staff physicians and volunteers dont just work herewe live grow and thrive here. If youre compassionate and driven we have exciting opportunities across our hospitals. Join us and make a real impact!

Physical Demands Analysis

Strength

Required Rarely lifting average 5-10 pounds maximum 15 pounds carrying pushing / pulling.

Mobility

Required Often prolonged sitting and

Required Occasionally standing and walking on hard surfaces bending / stooping.

Dexterity

Required Often prolonged fine finger movements

Required Frequently gripping / grasping eye / hand coordination and

Required Briefly reaching with both hands.

Equal Opportunity

We thank all interested candidates for their response however only those chosen for an interview will be contacted. Quinte Health is an equal opportunity employer committed to meeting needs under the Canadian Charter of Rights and Freedom and the Ontario Human Rights Code. Our Recruitment process follows the Accessibility for Ontarians with Disabilities Act in order to provide a fair and equitable process for all candidates. Applicants requiring accommodation through the recruitment / interview process are encouraged to contact the Human Resources Department at x2577 or for assistance.

Required Experience :

Senior IC

Key Skills

Splunk,IDS,Microsoft Access,SQL,Cybersecurity,Intelligence Experience,Malware Analysis,Tableau,Analysis Skills,SAS,Data Analysis Skills,Analytics

Employment Type : Full Time

Experience : years

Vacancy : 1