Privacy Officer in Sagamok, Ontario at Sagamok Anishnawbek

• Develop, implement, and maintain organizational privacy policies, procedures, and practices.
• Ensure compliance with applicable privacy legislation, regulations, and organizational standards.
• Monitor organizational practices related to the collection, use, disclosure, storage, and protection of personal information.
• Promote strong privacy governance and responsible information management practices across the organization.

• Conduct Privacy Impact Assessments (PIAs) for programs, services, and projects.
• Identify privacy risks and recommend mitigation strategies and corrective actions.
• Ensure compliance with privacy legislation including:
  • PHIPA
  • FIPPA
  • PIPEDA

• Monitor legislative changes and recommend updates to organizational processes and procedures.
• Ensure appropriate safeguards and controls are implemented to protect confidential information.

• Align privacy practices with community values, traditions, and governance structures.
• Incorporate Indigenous data sovereignty principles, including:

• Ensure culturally sensitive information is handled with appropriate care and discretion.
• Support privacy practices related to:
  • First Nations governance
  • Education
  • Health services
  • Social services
  • Judicial and dispute resolution frameworks
  • Election laws and governance systems

• Investigate privacy complaints and suspected breaches.
• Lead organizational responses and resolution efforts related to privacy incidents.
• Document breaches, prepare recommendations, and implement corrective measures to prevent recurrence.
• Support organizational risk management and incident reporting processes.

• Provide guidance and training to staff regarding privacy legislation, organizational policies, and best practices.
• Develop privacy awareness tools and resources including:
  • Guides
  • Checklists
  • Educational materials

• Promote a culture of privacy protection and confidentiality throughout the organization.
• Work collaboratively with departments to integrate privacy into daily operational practices.

• Develop and review privacy-related policies and procedures.
• Coordinate responses to requests for access to personal information.
• Ensure information requests are managed in accordance with legislation and organizational policies.
• Maintain records related to privacy compliance activities and information requests.
• Ensure privacy practices align with organizational values and governance frameworks.

• Provide advice and recommendations regarding privacy compliance and risk management.
• Prepare reports, briefings, and recommendations for senior leadership.
• Support audits, reviews, investigations, and compliance activities related to privacy matters.
• Provide guidance to leadership and staff on complex privacy and confidentiality issues.

• Valid driver’s license and vehicle for on-the-job use.
• Must be able to work flexible hours.
• Sign and maintain an annual oath of confidentiality.
• Secure and maintain certification in Privacy and Confidentiality.
• Strong interpersonal, organizational, and communication skills.
• Must provide a criminal record check prior to commencing employment.
• Incumbent is subject to six months’ probation.

QUALIFICATIONS:

• Bachelor’s Degree in Law, Finance, Business Administration, or a related field.

• Certified Information Privacy Professional (CIPP) certification required.

• Minimum three (3) years of experience developing privacy policies, procedures, or compliance controls.
• Experience working within a health sector, IT environment, or privacy compliance role preferred.
• Familiarity with:
  • Electronic Medical Records (EMR)
  • Health Information Systems (HIS)
  • Data flows and information management systems

• Strong understanding of privacy legislation, regulations, and governance frameworks.
• Knowledge of:
  • PHIPA
  • FIPPA
  • PIPEDA
  • Indigenous data governance principles
• Strong analytical and problem-solving skills, including conducting privacy impact assessments and risk analysis.
• Excellent written, verbal, and interpersonal communication skills.
• Technical awareness of information systems, cybersecurity, and emerging technologies such as AI.
• Knowledge of First Nations governance, laws, policies, and organizational structures.
• Understanding of Indigenous worldviews and Anishinaabe cultural values.