Job Title: Senior Privacy Impact Assessment (PIA) Specialist
Job Category: Privacy, Risk & Compliance
Location: Toronto, ON
Job Type: Contract
Experience: 3–9 Years
Pay Rate: CAD $700–$1,000 per day
Note: This job doesn't offer any benefits.
Position Overview
We are seeking a Senior Privacy Impact Assessment (PIA) Specialist to lead privacy assessments for complex business programs, digital services, and technology implementations. The role evaluates privacy risks, assesses compliance with FIPPA, and recommends controls to strengthen privacy protection.
Required Qualifications
Degree in Privacy, Law, Information Management, Business Analysis, Information Technology, or a related discipline, or equivalent experience.
3–9 years of relevant experience in privacy assessments, privacy compliance, risk management, or information governance.
Strong knowledge of Privacy Impact Assessment methodologies and privacy risk assessment.
Working knowledge of FIPPA and public-sector privacy compliance.
Experience with data-flow mapping, business-process modeling, and information lifecycle analysis.
Ability to identify privacy risks in complex business and technology environments.
Strong report-writing, stakeholder-management, facilitation, and presentation skills.
Experience maintaining risk registers, assessment documentation, and remediation plans.
Preferred Qualifications
Experience supporting public-sector or large enterprise privacy initiatives.
Privacy certifications, such as CIPP/C or CIPM.
Responsibilities
Lead end-to-end Privacy Impact Assessments for new systems, projects, services, and significant business changes.
Conduct detailed data-flow analysis and business-process modeling to identify personal information collection, use, disclosure, storage, retention, and disposal.
Assess privacy risks and recommend appropriate controls and mitigation strategies.
Interpret and apply FIPPA requirements and relevant organizational privacy policies.
Evaluate privacy implications of system integrations, information sharing, cloud services, and third-party solutions.
Conduct stakeholder interviews and workshops to identify privacy requirements and operational risks.
Review system designs, data inventories, business requirements, and information-management practices.
Develop PIA reports, privacy risk registers, recommendations, and remediation plans.
Advise project managers, business analysts, solution architects, and operational teams on privacy-by-design principles.
Monitor remediation activities and validate the implementation of agreed privacy controls.
Support privacy incident reviews, compliance reviews, and internal audit activities as required.
Present findings and recommendations to management, project sponsors, and privacy leadership.
Expected Deliverables
Completed PIAs and supporting assessment documentation.
Data-flow and business-process models.
Privacy risk assessments and mitigation recommendations.
Compliance analysis and remediation plans.
Management reports and stakeholder presentations.