Access and Privacy Officer - Oakville, Canada - Town of Oakville

Town of Oakville

Verified Company

Oakville, Canada

3 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Job Details:

Permanent Full Time (Non-Union):

Posting Status:

Open to all current Town of Oakville employees and external applicants:

Closing Date:

Applications for this position must be received at * no later than 11:59pm on
April 4, 2024
:

We offer:

A hybrid work schedule
A defined benefit pension plan (OMERS)
Comprehensive health plan complemented with life and disability insurance
A progressive work environment that promotes a work/life balance and strives to be a great place for great people to do great things

Under the direction of the Manager, Records and Information Services, this position will handle highly sensitive and far-reaching access to information requests, effectively manage organizational privacy-related matters and conduct privacy/security audits to guard the integrity of internal as well as external/resident information.

What can I expect to do in this role?:

Builds a strategic and comprehensive privacy framework that defines, develops, maintains and implements policies and processes that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of personal information (PI), paper and/or electronic, across all media types.
Ensures privacy forms, policies, standards and procedures are uptodate. This includes conducting and overseeing privacy impact assessments, corporate audits, providing guidance on data handling practices, and ensuring compliance with international, federal, provincial and municipal privacy laws and regulations.
Works closely with external resources, ITS, Legal, HR and Purchasing staff to develop and maintain robust data privacy and security measures. Implementation of the 7 key principals of Access by Design. Applies Routine Disclosure/Active Dissemination Best Practices. Monitors and coordinates response to emerging threats and vulnerabilities, conducts regular audits, and oversees incident response and recovery plans.
Designs and delivers specialized training programs and workshops to educate employees and vendors on access and privacy obligations and the data minimization concept, raising awareness of best practices and promoting a culture of data protection throughout the municipality. This position will make recommendations and provide guidance on how personal information, privacy and data is handled throughout its lifecycle.
Manages, assigns and processes requests for access to information from the public, ensuring compliance with statutory timelines and coordinating with relevant departments to gather and disseminate requested information.
Represents, negotiates and defends Town's position in appeals, mediations and adjudication with the Information Privacy Commissioner and appellants.
Primary point of contact for privacyrelated complaints and inquiries, investigating and resolving issues and breaches in a timely and professional manner. This includes liaising with relevant authorities, such as the Information and Privacy Commissioner's Office.
Accountable for creating and maintaining Corporate policies, procedures and standards that are consistent with legislative requirements, best practices, emerging security threats. Collaborates and guides internal stakeholders to develop, train and maintain access and privacy policies, procedures and protocols.
Performs other duties as assigned.

How do I qualify?

Successful completion of a degree in Records and Information Management, Business Law, Public Administration or a related discipline (or a combination of education, training and experience deemed equivalent).
Access and Privacy Professional Certification is an asset.
45 years of directly related experience working with the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) or other related access and privacy legislation, including experience in policy/procedure development and analysis.
Experience in conducting Privacy Impact Assessments (PIAs) and handling Privacy Breaches.
Sound knowledge of creating and delivering training and development, change management, risk management and an understanding of information systems.
Excellent mediation/negotiation skills.
Strong verbal and written communication skills with the ability to communicate complex, legal and technical information to a wide variety of audiences.
Sound investigative and technical research skills.
Strong attention to detail, prioritization, and time management skills.

Leadership Competencies:

-
Strategic Thinking - innovating through analysis and ideas.**: