Job Title: Senior Privacy Impact Assessment (PIA) SME
Job Category: Privacy, Risk & Compliance
Location: Toronto, ON
Job Type: Contract
Experience: 9+ Years
Pay Rate: CAD $1,000+ per day
Note: This job doesn't offer any benefits.
Position Overview
We are seeking a Senior Privacy Impact Assessment (PIA) Subject Matter Expert (SME) to provide strategic leadership in privacy risk management, regulatory compliance, and privacy-by-design practices. The role oversees complex, high-risk assessments, establishes assessment methodologies, and advises senior stakeholders on enterprise privacy risks.
Required Qualifications
Degree in Law, Privacy, Information Management, Information Technology, Public Administration, or a related field, or equivalent professional experience.
9+ years of relevant experience in privacy management, PIA leadership, regulatory compliance, or privacy risk consulting.
Extensive expertise in Privacy Impact Assessments and privacy risk management.
Advanced understanding of FIPPA and public-sector privacy governance.
Expertise in data-flow modeling, business-process analysis, and information lifecycle management.
Strong understanding of privacy-by-design, data minimization, access controls, and information-sharing risks.
Demonstrated experience leading complex privacy assessments and advising senior stakeholders.
Experience developing privacy assessment frameworks, governance standards, and quality assurance processes.
Strong leadership, analytical, facilitation, report-writing, and decision-support skills.
Preferred Qualifications
Experience in government or other highly regulated environments.
Advanced privacy certifications, such as CIPP/C or CIPM.
Responsibilities
Lead and oversee complex, high-impact Privacy Impact Assessments across enterprise and public-sector programs.
Establish PIA methodologies, assessment standards, review procedures, and quality assurance practices.
Provide expert interpretation of FIPPA and advise stakeholders on privacy obligations and compliance risks.
Evaluate complex data flows, business processes, information-sharing arrangements, and technology architectures.
Assess privacy risks associated with new technologies, system integrations, cloud platforms, analytics, and third-party services.
Develop risk-based recommendations, mitigation strategies, and privacy control frameworks.
Advise senior leadership, legal counsel, privacy officers, program directors, and technical architects on privacy matters.
Integrate privacy-by-design and data-minimization principles into enterprise architecture and project governance.
Review and approve assessment findings, risk ratings, mitigation plans, and final PIA reports within delegated authority.
Establish governance processes for tracking privacy risks, remediation actions, and compliance obligations.
Provide guidance on privacy incidents, regulatory inquiries, audit findings, and complex privacy issues.
Mentor junior and senior privacy specialists and provide expert review of their assessments.
Support the development of organizational privacy policies, standards, procedures, and training materials.
Identify emerging privacy risks and recommend improvements to privacy governance and assessment practices.
Expected Deliverables
Enterprise-level PIA reports and expert assessment reviews.
Privacy risk frameworks, methodologies, and governance standards.
High-risk privacy assessments and strategic mitigation plans.
Executive briefings and regulatory compliance recommendations.
Quality assurance reviews and specialist guidance for privacy teams.