Job Description

About the City of Hamilton Contribute to the City of Hamilton, one of Canada\xe2\x80\x99s largest cities - home to a diverse and strong economy, an active and inclusive community, a robust cultural and dining scene, hundreds of kilometres of hiking trails and natural beauty just minutes from the downtown core, and so much more. Join our diverse team of talented and ambitious staff who embody our values of sensational service, courageous change, steadfast integrity, collective ownership and being engaged empowered employees. Help us achieve our vision of being the best place to raise a child and age successfully. #BeTheReason

JOB POSTING




JOB ID #: 20091 Corporate Privacy Specialist
Corporate Services
City Clerk
71 Main St., W. NUMBER OF VACANCIES: 1 Full-Time Regular UNION/NON-UNION: Non Union Mgmt Professional HOURS Of WORK: 35.00 per week
GRADE: 6
SALARY/HOUR: $50.654 - $59.242 per hour

• Note: See appropriate Collective Agreement or the Non Union Salary Range for details.

ID #: 7519 Vaccine Verification \xe2\x80\x93 As a condition of employment you are required to provide proof that you are fully vaccinated or provide proof of valid exemption satisfactory to the employer prior to your start date. You must acknowledge and agree to comply with any future vaccine policy requirements as an ongoing condition of employment at the City of Hamilton.




SUMMARY OF DUTIES Reporting to the Manager, Corporate Records & Freedom of Information, the Corporate Privacy Specialist is the City\xe2\x80\x99s subject matter expert on the protection of privacy, supporting the administration of municipal programs and services, ensuring compliance with the Municipal Freedom of Information & Protection of Privacy Act (MFIPPA), Personal Health Information Protection Act (PHIPA), and the principles of Privacy By Design. The position is responsible developing and implementing the Corporate Privacy Program, including policies, procedures and strategies. The Corporate Privacy Specialist conducts Privacy Impact Assessments on business processes and technologies; develops and implements the Corporate Privacy Breach Protocol; investigates and leads the response to corporate privacy breaches; and develops and implements corporate privacy training. GENERAL DUTIES Applies expertise to analyze, develop and implement corporate privacy policy, procedures, protocols, guidelines and training, to facilitate compliance with privacy legislation. Provides advice and consultative support on the collection, use, protection and authorized disclosure of personal information and personal health information to support the administration and implementation of municipal programs, services and information systems. Reviews, identifies and analyzes the impact of developments and amendments to legislation, regulations, and decisions of the Information & Privacy Commissioner of Ontario (IPC), including significant IPC Orders and rulings, relevant to the protection of privacy. Assesses corporate implications, recommends appropriate action and implements change, ensures privacy program is reflective of current requirements. Coordinates the execution of Privacy Impact Assessments (PIA) for new, existing or enhanced services, programs, technologies and systems in collaboration with department/division program managers, Legal Services, IT Security Team, Risk Management, Procurement and IT contract management, and in some cases vendors, to support compliance with MFIPPA, PHIPA, the Personal Information Protection and Electronics Document Act (PIPEDA), and other related privacy legislation; evaluates and mitigates risk. Advises on privacy best practices, including the application of privacy by design principles to ensure privacy is embedded into business practices and the design and operation of IT systems, networked infrastructure, cloud computing, data management. Designs and delivers general and specific training programs and presentations to Corporate Leaders and staff to create awareness of privacy requirements, both in general and as they apply to specific departmental needs. Investigates and leads the response to reported corporate privacy breaches under MFIPPA. Assists program areas with reported privacy breaches by providing advice and recommendations to mitigate their impact. Receives and investigates privacy related complaints. Liaises with affected program areas to implement business process changes as appropriate to improve privacy protection practices Establishes and leads the Corporate Privacy Team with representation from all departments to support and ensure conformity with corporate privacy policies and processes to achieve division program goals in compliance with privacy legislation. Coordinates with Records & Information Management team to compile and maintain the corporate Directory of Records and the listing of Personal Information Banks used by the corporation, in accordance with legislative requirements while supporting and promoting, where applicable, the routine disclosure and active dissemination of information. Provides technical advice to senior leaders and elected officials on privacy issues that are sensitive and/or political and authors reports as required.
Collaborates with the Corporate Communications to ensure that the privacy and confidentiality of personal information is maintained throughout communications with print, broadcast and social media. Executes periodic audits of programs or technologies to ensure PIA recommendations are implemented and remain relevant to current practices and to ensure new risks are identified and reviewed, where applicable. Participates in meetings, task forces, work groups and special projects, as assigned. Works in accordance with the provisions of applicable Health and Safety legislation and all City of Hamilton corporate and departmental policies and procedures related to Occupational Health and Safety. QUALIFICATIONS A University degree in Legal Studies, Public Administration, Information Management, Information Technology or related discipline. Considerable experience in the application of federal and provincial privacy legislation and security of personal information and personal health information, collected, used, protected and disclosed through municipal programs and services, including and not limited to the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), Personal Health Information Protection Act, 2004 (PHIPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA). Certification with the International Association of Privacy Professionals (IAPP). Certified Information Privacy Professional Canada (CIPP/C), Certified Information Privacy Manager (CIPM) certification; or Privacy and Access Council of Canada (PACC) certification, is preferred. Previous working experience with conducting Privacy Impact Assessments on business processes and technologies and evaluating and addressing complex Threat Risk Assessments. Demonstrated strong research and analytical skills to assess privacy compliance, investigate issues and complaints and make recommendations to improve the privacy, security and confidentiality of business processes. Considerable experience in designing and delivering privacy awareness training programs. Excellent oral and written communication skills with the ability to present complex facts, information and explanations to senior leaders, members of Council and various audiences. Excellent interpersonal skills and ability to build trusted working relationships and effectively collaborate with colleagues and stakeholders to build consensus and provide sound judgement. Demonstrated ability to exercise initiative and work effectively under a high volume of work with continuously changing priorities. Working knowledge of the statutory responsibilities of the Office of the City Clerk. Proficiency with MS Office Suite software and Adobe Acrobat.



Disclaimer: Be advised that Human Resources frequently audits resumes of internal/external applicants to ensure/validate information provided is consistent and trustworthy. Falsification of information provided at any time throughout the recruitment process may be grounds for disqualification, and for internal applicants, subject to discipline up to and including termination. Terms: The City is an equal opportunity employer that is committed to inclusive, barrier-free recruitment and selection processes. Consistent with our Values and Corporate Culture Pillars, the City of Hamilton is committed to providing equitable treatment to all with respect to barrier-free employment and accommodation without discrimination. The City will provide accommodation for applicants in all aspects of the hiring process, up to the point of undue hardship. If you have an accommodation need, please contact Human Resources as soon as possible to make appropriate arrangements. We invite you to visit the departmental webpage to obtain further information on the culture and business of this department. The incumbent shall comply with all Health and Safety Policies and Practices for this position and the workplace. It is the responsibility of the applicants to ensure that their application reaches Human Resources by the closing date or they may not be considered. It is also the responsibility of applicants to supply qualifications, licences and related experience relevant to the qualifications outlined above for this competition as directed. On the basis of the criteria set out above, this posting is open to all applicants The statements made by me are true, complete and correct to the best of my knowledge. I understand that any falsification of statements, misrepresentations, deliberate omission or concealment of information may be considered just cause for discipline, up to and including termination for internal applicants and disqualification for external applicants.