Team Leader - Access to Information & Privacy

healthscie

5d•Onsite

About The Position

Provide general direction and mentorship to the Privacy and Access to Information Analysts to ensure compliance with legislation and adherence to industry standards by supporting the Privacy and Information Security practices of HSN as both a Health Information Custodian (HIC) and Health Information Network Provider (HINP). This role reports to the Manager, Access to Information and Privacy.

Requirements

Minimum of a four (4) year Bachelor’s Degree in Law, Business, Technology, or in a related field, from an accredited university.
Ministry of Labour “Worker Health and Safety Awareness in 4 Steps” training certificate is required.
Minimum of three (3) years’ experience working in a Privacy, Compliance, Risk Management or Information Security department within a health care environment.
Demonstrated knowledge of Ontario and Canadian privacy laws, including Personal Health Information Protection Act (PHIPA), Freedom of Information and Protection of Privacy Act (FIPPA), and Personal Information Protection and Electronic Documents Act (PIPEDA).
Demonstrated ability to interpret and apply legislation, policy, and precedent.
Demonstrated knowledge of privacy and information security standards, including Generally Accepted Privacy Principles (GAPP), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO).
Demonstrated ability to analyze and interpret privacy and information security data.
Demonstrated ability to manage conflict and facilitate problem-solving in difficult situations.
Demonstrated excellent judgment and proven analytical skills.
Demonstrated training, experience or utilization of lean methodology for process improvement.
Demonstrated ability to independently identify issues, plan improvements, measure success and continue improvement.
Demonstrated excellent computer skills with proficiency in Microsoft Office software (e.g. Word, Excel, Power Point and Outlook) and patient information systems.
Demonstrated superior interpersonal and communication skills, both written and verbal.
Demonstrated ability to manage routine correspondence, multiple tasks/projects, diversified workload and rapidly changing priorities and challenging deadlines.
Demonstrated discretion and maturity when handling confidential information.
Demonstrated commitment to the safety of co-workers and patients.
Successful Criminal Records and Judicial Matters Check (CRJMC) is required.
Proven ability to work independently and in a team environment.
Demonstrated ability to perform with minimal supervision; to prioritize duties.
Demonstrated commitment to ongoing professional development.
Demonstrated professionalism in dealing with confidential and sensitive issues.
Demonstrated positive work record and excellent attendance record.
Ability to meet the physical and sensory demands of the job.
Ability to travel between local sites.

Nice To Haves

Certification as a Certified Information Privacy Professional (CIPP) or a related privacy/information security designation is preferred.

Responsibilities

Provide subject matter expertise, coordination, leadership support, and quality oversight to the Privacy and Access to Information department; ensure the consistent application of privacy and access processes, accuracy of analytical outputs and documentation, and compliance with applicable policies, procedures, and legislation.
Serve as the primary escalation resource for analysts on complex files, technical issues, and interpretation of privacy and access to information legislation.
Provide oversight of consultation, guidance, and recommendations related to existing and emerging federal and provincial legislative requirements.
Coordinate departmental workflows, including workload distribution and monitoring of task progress to ensure service standards, timelines, and quality objectives are met.
Oversee the standardized approach to privacy risk management, including the identification, analysis, documentation, mitigation, and monitoring of privacy and information security risks across HSN and regional partners; manage the privacy risk register and escalate systemic issues to the Manager with recommendations to reduce future risk.
Accountable for the organizational response to privacy complaints, investigations, reported privacy and information security breaches, and related corrective action recommendations within HSN and regionally shared information systems.
Lead the development, implementation, and maintenance of privacy related policies, materials, work standards, and training programs; promote privacy and information security awareness through training, communications, and educational resources within HSN and associated entities.
Develop, lead, and report on Privacy Impact Assessments (PIAs), organizational privacy attestations, and privacy audits and reviews.
Assess and evaluate technology-based solutions and information systems to support organizational privacy and access requirements, including Marketed Services and regional or provincial systems.
Participate in staff recruitment activities and lead new hire orientation and onboarding training related to privacy and access responsibilities as required.
Maintain a working knowledge of Health Information Systems (HIS), supporting networks, and their relationships to internal and external information systems.
Oversee the work of others in compliance with the Occupational Health and Safety Act (OHSA), its regulations, and HSN policies.
Determine and align improvement projects with HSN’s Strategic Plan; monitor and adjust to achieve goal outcomes.
Contribute to learner development by providing academic support, mentorship, preceptorship and supervision as required.
Participate in education and training specific to current, relevant federal and provincial health and safety legislation, standards and guidelines.
Educate and promote health, safety and wellness in the work place.
Represent the department or program on various committees and in meetings as required.
Perform other duties as required.