Access and Privacy Specialist

POSITION: Access and Privacy Specialist

REPORTS TO: Manager, Information Management

DEPARTMENT: Legal Services and Corporate Governance

LOCATION: North Bay

WHO WE ARE: Ontario Northland Transportation Commission (ONTC) is an Agency of the Province of Ontario that provides efficient and vital transportation services. We are a modern, forward-thinking organization focused on providing safe and reliable transportation services. ONTC has a rich history of over 120 years and strong connections to the communities we serve. With over 900 skilled professionals, we work together to enhance transportation services and ensure that they are sustainable for future generations. We offer a dynamic workplace culture, along with a competitive salary, excellent benefit package, a defined benefit pension plan, paid vacation, paid personal leave days and discounted transportation on our bus and passenger rail services.

ACCOUNTABILITY STATEMENT: The Access and Privacy Specialist plays a lead role in developing and implementing the agency’s access and privacy management program, including responding to access to information requests, developing and implementing policies, processes and tools, monitoring privacy program activities to ensure compliance with relevant legislation and Ministry directives and mitigating related organizational and reputational risks.

MAJOR DUTIES/ RESPONSIBILITIES:

• Process FOI access requests made under the Freedom of Information and Protection of Privacy Act (FIPPA)
• Work with in-house counsel, participate in matters brought before the Information and Privacy Commissioner/Ontario (IPC)
• Respond to access to information requests for video records from law enforcement agencies and internal departments
• Develop and deliver privacy program training materials for employees at all levels
• Provide privacy advice and expertise on procurements and other enterprise activities
• Foster a privacy culture and build organizational competency regarding the collection, use, disclosure, retention and disposition of personal and confidential information
• Manage access to information and privacy content on the agency’s website and intranet.
• Identify and assess privacy risks and provide privacy program controls and/or other risk mitigation activities
• Review contracts for services with external vendors to ensure privacy requirements are addressed through appropriate contractual language
• Develop the agency’s Privacy Breach Protocol and implement other privacy-related initiatives required under FIPPA
• Lead and/or participate in developing policies, processes, procedures and tools in support of the agency’s compliance with relevant legislation and government directives
• Leverage emerging privacy trends, legislation and innovations to refine and optimize current practices
• Act as a liaison between information management practices and the privacy program.
• Integrate privacy into business strategies, procurements, programs, and technology design through in-house assessments

REQUIREMENTS:

• University degree in Business, Law, Political Science, Public Administration or a Privacy or Records and Information Management Program or similar program or a combination of education, training and experience deemed equivalent
• Minimum 5 years’ experience in information management or a related field, in a public sector
• Certification in privacy from a recognized association for access and privacy professionals (IAPP, PACC) would be an asset
• Thorough understanding of “privacy-by-design,” privacy principles and standards, and industry best practices
• Experience and knowledge of FIPPA and orders of the IPC
• Demonstrated experience with conducting privacy assessments, including developing risk mitigation plans and corporate policies
• Analytical skills to evaluate requests, to investigate complaints and issues, and to provide expertise and recommendations
• Excellent customer service skills and the ability to influence others, build relationships, manage conflicts, and handle negotiations
• Interpersonal, oral and written communication and training skills
• Planning and organizational skills to adapt to changing priorities
• Proficiency using computers and Microsoft Office Suite applications
• Experience with business process mapping/business analysis would be an asset
• Must be committed to company health & safety

BACKGROUND INVESTIGATION: The successful candidate will need to pass the following clearances: criminal record check, employment references and education verification.

CLOSING DATE: January 16, 2025 no later than 11:59 p.m