Privacy Analyst

Privacy Analyst

Requisition #2418376 Job LocationCanada-British Columbia-Burnaby Job StreamLegal Job TypePermanent, Full-Time Number of Positions1 Start Date of Employment ASAP Posting Date03-Jun-2024 Travel RequiredNot Required Educational RequirementsBachelors Degree Languages RequiredEnglish Job Description

About Pacific Blue Cross

Pacific Blue Cross (PBC) has been British Columbia's leading benefits provider for over 80 years. We are an independent, not-for-profit society with strong roots in BC’s health care system.

We provide health, dental, life, disability, and travel coverage to 1 in 3 British Columbians through employee group plans and individual plans.

We are fueled by a commitment to keep health care sustainable for all British Columbians. Through our PBC Health Foundation, we fund projects that improve health outcomes directly related to mental health and wellbeing as well as the prevention and / or management of chronic disease.

We are interested in finding people who want to make a difference and who are looking to grow their career with us.

Perks

• Work-life balance with flexible working hours of 7 hours per day, Monday to Friday (i.e., 35 hours per week).
• Paid vacation starts at 3 weeks per year, and increases with years of service.
• Hybrid work environment (i.e., a combination of work from office and work from home days).
• Generous benefits, including extended health, dental, and life insurance; these benefit premiums are 100% paid by PBC.
• Company pension contributions after 1 year of service.
• Education allowance up to $1,000 per calendar year.
• Onsite gym, cafeteria, and access to virtual doctors / counsellors 24 / 7 via our Employee Family Assistance Program!

About the Position

• We are searching for 1 permanent Privacy Analyst to join our Privacy team.
• This position is unionized and part of the CUPE 1816 Bargaining Unit. This position is paid at hourly rates and receives wage increases in accordance with the Collective Agreement.

The starting wage for this position is : $34.84 per hour.

Job Summary

Under the broad direction of the Chief Privacy Officer and Legal Counsel, the Privacy Analyst requires a high level of confidentiality and plays a key role in supporting PBC’s corporate privacy management program.

The Privacy Analyst assists in ensuring compliance with all legal requirements and internal privacy protection policies applicable across PBC while collaborating cross-functionally to mitigate privacy risk, supporting innovation, and instilling best practices.

This Privacy Analyst will support the Chief Privacy Officer and Legal Counsel with the following functions : investigating privacy breaches and / or incidents, conducting Privacy Impact Assessments (PIAs), responding to privacy inquiries, processing information access requests, and delivering privacy training.

Job Duties

Reviews privacy breaches and / or incidents, and where appropriate investigates them. Investigations may include interviewing external stakeholders (e.

g., members) and internal stakeholders (e.g., employees, managers, and other stakeholders), determining the root cause, identifying the appropriate mitigation measures, drafting privacy incident reports, and maintaining the corporate privacy incident log.

The Privacy Analyst will escalate significant breaches and / or incidents to the Chief Privacy Officer and Legal Counsel, as needed.

• Conducts and reviews PIAs of both routine and technologically complex internal and external systems, programs, and initiatives - in conjunction with other internal stakeholders - to assist in assessing new or redesigned existing systems, programs, and initiatives, as directed.
• Provides privacy information and responds to both routine and complex privacy inquiries from internal and external stakeholders.

Reviews requests, searches for the appropriate records, redacts records as needed, and prepares response letters, as needed.

Conducts research and analysis related to ongoing privacy law compliance in order to provide advice and recommendations for developing policy and supporting PBC initiatives, as needed.

Drafts, revises, and maintains authorization forms, privacy policies and procedures, and other materials for privacy compliance.

Maintains up-to-date knowledge on privacy legislation and best practices, and all areas of job operation through continuous education activities.

Supports the preparation of documents for various internal and external stakeholders at PBC including reports for committees, management, and the Board of Directors, as directed.

Attends various meetings on behalf of the Chief Privacy Officer and Legal Counsel, as needed.

• Delivers education and training on privacy to internal stakeholders, as directed. Supports the revision, update, and maintenance of privacy training materials.
• Updates and maintains PBC’s various databases and registries for privacy compliance management, including a PIA directory and the database of corporate privacy policies and procedures.
• Performs other ad hoc duties, as required.

Qualifications

• High school graduation, or equivalent.
• Completion of a Business Communications course (36 hours), or equivalent.
• Demonstrated proficiency in intermediate Excel, Word, and PowerPoint.
• Completion of an intermediate Excel course (18 hours), or equivalent.
• Completion of an intermediate Word course (18 hours), or equivalent.
• Completion of an intermediate PowerPoint course (12 hours), or equivalent.
• 4 years of related experience researching and writing formal documents / reports (such as policy research and / or analysis, proposal or grant writing, etc.

including 2 years of experience in a Privacy Analyst or an equivalent position interpreting the British Columbia Personal Information Protection Act (PIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA), or interpreting the equivalent privacy legislation in other jurisdictions.

• Demonstrated experience preparing reports to support policy analysis and decision-making for privacy.
• Demonstrated experience drafting PIAs for technological systems that adhere to the guidelines for private sector entities under privacy legislation (e.g., PIPA and FIPPA).

Note :

Responding to significant privacy breaches / incidents may occasionally require ad hoc work outside of normal business hours (e.

g., nights and weekends).