Senior Privacy Impact Assessment PIA Specialist

We are seeking an experienced Senior Privacy Impact Assessment (PIA) Specialist to lead and support the end-to-end development of Privacy Impact Assessments for enterprise systems, digital tools, and proposed business initiatives. In this role, you will evaluate whether new technologies, complex data flows, and information systems comply with relevant provincial, federal, and private sector privacy legislation, policies, and internationally accepted Fair Information Practices. Working across cross-functional technical and business teams, you will map data flows, identify privacy risks, design mitigation strategies, and ensure strong personal information safeguards.

Location: Toronto, ON (Fully Onsite – 5 days/week required)

Duration: 1-month contract.

Advantages
Specialized Privacy Leadership: Direct high-visibility Privacy Impact Assessments for complex enterprise technology environments.

Cross-Disciplinary Impact: Work at the intersection of IT security, cloud architecture, risk management, and legislative policy.

Focused Short-Term Mandate: Deliver immediate, high-value compliance outcomes in an intensive 1-month contract.

Dedicated Onsite Collaboration: Partner directly with senior business leads, security architects, and project managers in a focused 5-day per week workspace.

Responsibilities
PIA Development & Governance: Lead and execute Privacy Impact Assessments (PIAs) to evaluate compliance with legislative, regulatory, and policy requirements for digital systems and program initiatives.

Privacy Risk Identification & Mitigation: Identify current and emerging privacy risks, author risk countermeasure strategies, and develop policies to manage personal information safely throughout its lifecycle.

Data Flow & Business Process Analysis: Interpret and create detailed data flow diagrams (DFDs) and business process maps to trace personal information collection, storage, use, disclosure, and retention.

Cross-Disciplinary Coordination: Direct cross-functional teams across IT security, enterprise architecture, legal, business analysis, and project management to gather technical inputs for PIA documentation.

Compliance & Legislative Interpretation: Apply statutory frameworks—including FIPPA, MFIPPA, PHIPA, PIPEDA, and AODA—alongside jurisprudence from the Information and Privacy Commissioner to business and technical architectures.

Records Management & Retention: Align privacy assessments with corporate policies, retention schedules, and classification standards regarding the disposition of sensitive data.

Stakeholder Communication: Articulate privacy principles, compliance obligations, and risk assessments clearly to technical leads, business stakeholders, and non-privacy experts.

Qualifications
Standard PIA Processes & Frameworks: Hands-on familiarity with public sector Privacy Impact Assessment processes, methodologies, and standardized evaluation tools (Strictly Required).

Cross-Disciplinary IT & Policy Knowledge: Strong understanding of related disciplines, including IT security, system design, business architecture, legal processes, risk management, and business analysis (Strictly Required).

PIA Execution & Facilitation: Proven ability to lead or support PIA development independently or as part of a team by directing and gathering technical input from cross-functional stakeholders (Strictly Required).

IT Architecture & Data Flow Concepts: Demonstrated knowledge of IT concepts impacting personal data protection, including internet tools, system interfaces, information security, architecture, and data flow diagrams (Strictly Required).

Privacy Legislation & Governance: Deep understanding of statutory privacy frameworks (FIPPA, MFIPPA, PHIPA, PIPEDA) and AODA accessibility requirements (Strictly Required).

Nice-to-Have Assets:
Professional certifications in IT security, privacy, or enterprise architecture (e.g., CIPP/C, CIPM, CISSP).

Experience developing and delivering privacy training or educational sessions to technical teams.

Background in developing business cases, risk assessment frameworks, or governance policies.

Summary
If you're interested in the "Senior Privacy Impact Assessment (PIA) Specialist" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.