Senior Privacy Analyst
Quinte Health
Belleville Ontario
Salary: Neg Per Hour
Required
Education and Experience
- Hold
an undergraduate degree in law, business administration, public
administration, or related professional degree (Physiotherapy,
Occupational Therapy, Nursing, CHIM, IT), or equivalent
education/experience with evidence of continuing professional development
in privacy
- Certified
Information Privacy Professional or other relevant privacy designation is
an asset
- 3+
years relevant experience in privacy, legal, risk, or compliance work
including recent experience focused in public sector healthcare privacy is
preferred.
- 5+
years IT, informatics, Health Information Management or healthcare
clinical work is an asset.
- Experience
with developing and/or leading privacy program and operational activities
including for example, privacy breach management, training and awareness,
auditing, and privacy risk management
- Experience
designing and implementing processes, tools, forms, logs, and other
mechanisms to support compliance activities, including the development of
metrics, dashboards, and reports
- Experience
leading working groups, projects or programs
Knowledge and Skills
- Extensive
knowledge of Ontario’s Freedom of Information and Protection of Privacy
Act (FIPPA) and Personal Health Information Protection Act, 2004 (PHIPA),
privacy best practices and industry standards
- Broad
understanding of privacy concepts, trends, legislative and regulatory
requirements and/or other emerging issues (such as de-identification,
event auditing and monitoring, privacy maturity models, etc.) and their
potential impacts on goals, priorities and activities within a privacy
program
- Demonstrated
ability to conceive, support and/or implement projects from start to
finish while managing processes and expectations accordingly
- Proficient
in Microsoft based work environment i.e. Word, PowerPoint, Excel, Teams
- Strong
organizational skills and ability to establish and manage priorities with
a superior commitment to follow-through
- Excellent
interpersonal skills with ability to build collaborative relationships
with QH business teams
- Strong
written communication skills, including the ability to draft policies,
briefing notes, compliance assessments, etc. that involve technical
privacy and compliance concepts
- Ability
to effectively communicate, present and be comfortable speaking to QH
senior executives, clinicians, external stakeholders and business teams on
privacy compliance and risk management concepts
Duties
- Develop
multi-year plans, strategies, and cadence,
- Plan
privacy team projects and/or support the planning and execution of
portfolio or functional team projects in response to IPC recommendations,
- Lead
the review, update, development, and implementation of privacy policies
and supporting artefacts such as procedures, templates, and logs required
to meet compliance requirements and mature Quinte Health’s privacy program
in accordance with evolving industry privacy standards and best practices,
- Prepare
and/or assist in the preparation of responses to any IPC comments,
inquiries and/or recommendations received, and often within time sensitive
timelines,
- Develop
project management plans and support leaders, and employees across Quinte
Health to ensure indicators are collected, logged and reported in
accordance with Quinte Health’s information practices and IPC requirements
within specific, and time sensitive timelines,
- Collaborate
with members of the privacy team and other Quinte Health portfolios or
functional teams (i.e. Information Security, Enterprise Risk Management,
etc.) to ensure Quinte Health has integrated and harmonized information
practices,
- Act
as the subject matter expert as you coordinate and support the management,
and execution of program and operational activities required to ensure
Quinte Health’s compliance with IPC requirements, including but not
limited to governance and accountability, privacy breach management,
privacy risk management, and privacy training and awareness activities,
- Develop
privacy audit plans and conduct privacy audits across Quinte Health
portfolios on an ongoing basis and/or as scheduled by privacy policies and
procedures,
- Lead
and participate in privacy governance, risk and compliance activities, as
required,
- Monitor
and stay current on relevant privacy, legal, technology and other matters
that may impact IPC requirements, and Quinte Health’s privacy program and
risk posture.
- To
assist the organization to implement, sustain monitor and improve a
comprehensive privacy program in a complex healthcare environment.
- Provide
guidance, as a subject matter expert, to Digital Shared Services and/or
Information Technology vendors on the design, maintenance and operation of
electronic information systems containing personal health information
(PHI) and personal information (PI) to ensure they are compliant with
relevant privacy legislation.
- Maintains
strong listening skills and can draw out information by hearing what has
been said/not said and understanding the underlying meaning behind the
speaker’s words and behavior.
- Represents Quinte Privacy on various regional committees and working groups.
Job Overview
Posted Date: 26 Jan 2026
Location: Belleville Ontario
Salary: Neg Per Hour
Company Information
The team of 2,600 staff and physicians provide care through four emergency departments, operating rooms at three hospitals, a rehabilitation day hospital, ambulatory care clinics, and a range of diagnostic services. There are more than 335 inpatient beds for acute medical patients, intensive care, obstetrics, paediatrics, mental health, complex continuing care, rehabilitation, and surgery. In addition, Quinte Health is proud to operate the Quinte Children’s Treatment Centre, community mental health programs, and to be a member of the Hastings Prince Edward Ontario Health Team.
Name: Quinte Health
Web: https://quintehealth.ca/