The Opportunity

Reporting to the Associate General Counsel, the Privacy Officer – OPOR, Audit Program, & Research will be IWK Health’s dedicated resource for privacy matters pertaining to IWK’s OPOR implementation, IWK’s audit program, and support of IWK’s Research, Innovation and Advancement Services.

Specifically, the Privacy Officer – OPOR, Audit, and Research

• has a critical role in the success of One Person One Record, a complex, multi-organizational clinical transformation initiative. This involves supporting the organization in the rationalization of disparate systems and the One Person, One Record (OPOR) strategy. The Privacy Officer, OPOR ensures adherence to IWK Health’s privacy principles, policies and procedures while overseeing a Privacy by Design approach through all phases of the OPOR project; requirements, design, development, testing, and implementation.
• is responsible to develop and implement a comprehensive auditing program at IWK Health, including conducting audits of access to personal health information across various electronic health information systems and identifying suspected inappropriate access for investigation by the Privacy Officer and responsible manager, or leading investigations with the applicable Manager (if OPOR or RIA related). This role will design, develop, implement, and evaluate the IWK electronic system audit plan and audit processes, working with the Privacy team, Information Management and Technology, and other key partners.
• is the primary privacy support to IWK Health’s Research Innovation and Advancement (RIA) Services team, responsible for consultation, education, and policy development to improve IWK’s PHIA research compliance, reviewing RIA privacy impact assessments, and improving RIA data access processes.

Responsibilities

More generally, this role will also be available as a support to the IWK Privacy Office, supporting the other Privacy Officer with functions of the Privacy Office as required, including breach investigation, privacy consults, PIAs, reporting, and managing information requests under the Freedom of Information and Protection of Privacy (FOIPOP) Act.

This role will be responsible for developing reports to management on IWK’s OPOR privacy compliance and implementation, privacy audit program and RIA privacy support, and co-leading the IWK’s Privacy Best Practice Committee.

Key to this role is providing consultation, advice, and education to IWK management on OPOR related to privacy matters, audit and research and innovation support, and being the IWK privacy representative on provincial committees/initiatives involving this privacy work. This role also liaises with the Nova Scotia Office of the Information and Privacy Commissioner, as necessary.

Hours of Work

75 hours bi-weekly

Your Qualifications

• University graduate in related field (e.g., Law, Business Administration, Health Information Management, Information Technology; Healthcare Profession). An equivalent combination of education, training and experience may be considered.
• Privacy, information systems audit or security designation is an asset (e.g., IAPP, CISA, CISSP, MCSA).
• Minimum of 3 years’ experience working in a privacy professional role, or minimum 3 years demonstrated relevant and transferable professional experience.
• Experience in a health care setting is required.
• Knowledge and demonstrated experience with Privacy Auditing Tools and practices.
• Strong working knowledge of current personal health information legislation.
• Strong analytical, organizational, and problem-solving skills with the ability to multi-task to meet tight deadlines.
• Demonstrated strong organization, facilitation, communication, and presentation skills.
• Exceptional computer skills, with ability to learn and adapt to different health information systems.
• Strong analytical and logical problem-solving ability while maintaining attention to detail
• A high degree of tact, diplomacy, integrity, and impartiality
• Ability to function independently and the ability to work collaboratively in a team environment.
• Critical thinking and independent analysis and problem-solving skills essential.
• Self-motivated and self-aware; demonstrated ability to work independently as well as collaboratively with internal and external key parnters.
• Strong sense of ethics and the ability to handle sensitive and confidential or privacy information with tact and discretion, knowledge of data privacy laws.
• Professional, responsive, and positive work attitude is critical.
• Strong customer service orientation, ability to deal with stressful situations.
• Understanding and commitment to the principles of patient and family centred care.
• Respects the dignity, values, privacy and beliefs of the individual and keeps confidentiality of patient information paramount at all times.