[Hiring] Manager, Privacy Reviews and Consulting @Fraser Health

Role Description

Bring your demonstrated leadership and knowledge to this exciting opportunity as a Manager, Privacy Reviews and Consulting with Fraser Health’s Information Access and Privacy department. In this role, you will advise on Fraser Health’s legal obligations under the Freedom of Information and Protection of Privacy Act (the Act) with respect to privacy protections and compliance relating to the assigned areas, with specific focus in the area of Privacy Impact Assessments.

The Manager works closely with the Information Access, Privacy Auditing and Investigation, Legal, and Risk Management teams on matters involving the Act, and with the Digital Health/Information Technology team on ensuring privacy and security compliance for projects involving technology.

Responsibilities

• Lead and manage the assigned areas of: Privacy Impact Assessments (PIAs) and reviews, Information Sharing Agreements and Plans, ongoing requests for privacy consulting across Fraser Health, organization wide Privacy Policies and Procedures, and assistance with the negotiation of contractual privacy terms.
• Proactively identify opportunities for improvement and initiate, facilitate and promote privacy compliance activities within FH.
• Create and maintain templates, processes and digital tracking and filing systems that allow their team to complete assigned responsibilities efficiently and effectively and preserve comprehensive decision making records.
• Use current case law, OIPC regulatory orders and other privacy guidance documents to advise on and support privacy recommendations, including collection, use, storage and disclosure of personal information.
• Advise and negotiate information sharing and access agreements in relation to the sharing of personal information with third parties.
• Build strategic relationships and collaborations within FH leaders to promote a culture of privacy compliance with the Act. Build consensus with relevant leaders on compliance requirements in the Act.
• Partner with program areas such as Virtual Health, Innovation, and Digital Health to form effective working relationships to ensure projects and/or initiatives involving personal information are appropriately implemented and contain effective and efficient privacy access and monitoring controls.
• Collaborate with Information Access, Privacy Auditing and Investigations, Legal Services, Risk Management, senior management, program leaders and representatives to ensure FH maintains appropriate documentation for projects and initiatives that involve personal information in line with current legislative requirements.
• Establish and oversee central intake processes for the assigned areas by training and supporting intake staff, creating workload trackers and ensuring that workload is triaged according to risk and urgency.
• Develop performance metrics for the assigned areas, generates reports, and uses such reports and metrics to recommend improvements to practices.
• Oversee the development and implementation of policies, procedures and guidance documents across FH related to privacy to ensure compliance with the Act.
• Review complex PIAs where the risk level has been scored moderate to high and negotiate suitable remedial actions when required to lower the residual risk.
• Manage the recruitment, mentoring, selection and professional development of assigned staff. Supervise designated staff, provides work direction and assignment of duties to meet operational requirements.
• Conduct employee performance reviews and coaching sessions. Facilitate goal setting with employees including the identification of educational and/or training requirements.
• Implement employee discipline up to and including termination, when necessary.
• Develop budgets for the assigned areas of responsibility. Monitor expenditures, variance analysis and reporting. Implement corrective action as required.
• Represent FH as a senior leader on provincial working groups concerning matters related to privacy, research and breach management.
• Remain current on relevant international, federal and provincial privacy laws and accreditation standards. Monitor for any relevant changes.
• Share information and potential implications of such changes with senior management to ensure organizational adaptation and compliance.
• Represent FH in dealings with the OIPC relating to compliance with the Act where required by the Director.

Qualifications

• Master’s and bachelor’s degrees in Health Administration, Business (MBA), Information Management or related discipline or an equivalent level of education, training, and experience.
• A minimum of seven (7) years in privacy, information management or relevant field including demonstrated experience in managing staff.
• Completion of the Information Access and Protection of Privacy Certificate Program an asset.
• An equivalent combination of education, training and experience is acceptable.

Benefits

• Competitive salary range: CAD $55.25 - $79.42 / hour.
• Full Time position that may be based out of Central City office in Surrey, BC or a home office (remote) within BC.