Senior Privacy and Information Analyst

Summary

This position provides leadership and expertise specific to privacy compliance and information management.  The position supports and collaborates with the Manager in administering the corporate privacy management program with emphasis on ensuring adherence to the requirements of the Freedom of Information and Protection of Privacy Act (FOIPPA).  This position professionally contributes to day-to-day information access and privacy analysis, compliance/risk monitoring and education operations of the Privacy and Information team. This position works collaboratively with internal stakeholders and partners in developing, reviewing, and approving corporate Privacy Impact Assessments (PIA’s) and provides internal advice and education to maintain the protection of privacy and confidentiality of sensitive information.

Key Duties & Responsibilities

• Provides subject matter expertise in FOIPPA, access to information and privacy legislation, principles, and standards; 
• Supports and collaborates with the Manager in the development, implementation and improvement of privacy management program policies, procedures and guidance tools;
• Supervises the Privacy & Information team with respect to privacy protection issues and administration of the privacy management program;
• Provides professional guidance to internal stakeholders about privacy protection requirements and Privacy and Information services, including but not limited to direct client support, education, training, support tools and resources development for the privacy management program; 
• Collaborates with and assists the Manager in designing and delivering privacy and information education programs;
• Collaborates with internal stakeholders to administer the privacy impact assessment (PIA) process, including analysis of business activities in relation to privacy program requirements, risk analysis and mitigation plans; 
• Collaborates with IT Security to support security-related aspects of PIA’s in accordance with FOIPPA;
• Assists the Manager in managing privacy breach investigations, including but not limited to investigation coordination, case file documentation, fact-finding, report creation and liaison with the Office of the Information and Privacy Commissioner (OIPC) for BC, as required; 
• Supports the Manager in the development, implementation and evolution of the Personal Information Bank Directory and supporting processes and tools; 
• Manages confidential intake (internal/external), assessment and triaging of key privacy management activities such as reported privacy breaches and PIA inquiries and requests, including detailed and accurate case file documentation; 
• Acts as a Privacy and Information stakeholder and subject matter expert in corporate initiatives, projects and activities to guide corporate information management activities in support of effective FOIPPA compliance and a privacy-conscious organizational culture; 
• Follows all policies, procedures and standards of the CRD;
• Performs other related duties as required.

Additional Information

• None

Key Skills & Abilities

• Requires excellent communication (oral, written and presentation), interpersonal and customer service skills;
• Proven experience working collaboratively to analyse processes and implement privacy improvements;
• Proven experience applying privacy management program requirements in large organizations; 
• Applied knowledge of FOIPPA, and the ability to synthesize and analyse relevant legislation, policies and/or standards in relation to business practices;
• Strong assessment and problem-solving skills, including ability to research, analyse, interpret and summarize issues;
• Strong technical and business analysis skills with an ability to work across multiple tools and platforms to map business processes and identify and document information flows; 
• Ability to oversee, perform and complete complex, detailed procedures to a professional standard;
• Ability to design, create and maintain documentation, presentations, forms, templates, reports, other communications and tools;
• High degree of comfort with public speaking and the ability to coordinate and deliver training and education sessions, in person and/or virtually; 
• High level of proficiency and experience with MS Office applications (Word, Excel, PowerPoint, Visio);
• Confidence and strong leadership skills to advise, guide, coach and train team members and clients;
• Proficiency using SharePoint and experience configuring libraries, content types, document sets, managed metadata and views is desired;
• Experience implementing and/or administering PIA’s in the BC public sector is desired;
• Experience working with case file management structures and tools (i.e. legal or law enforcement files) is desired;

Qualifications

Certifications