Manager | Information Privacy

Position Summary
Who are we looking for?

Interior Health is hiring a Manager, Information Privacy. This position is flexible within the Interior Health region. Apply today to join an amazing team!

What we offer:

- Employee & Family Assistance Program
- Employer paid training/education opportunities
- Employer paid vacation
- Medical Services Plan
- Employer paid insurance premiums
- Extended health &dental coverage
- Municipal Pension Plan
- Work-life balance
- This position may be eligible for relocation allowance

Salary range for the position is $106,026 to $152,413. Interior Health establishes salaries within the minimum and maximum of the salary range based on consideration of the qualifications, experience of the applicant, and an internal equity review of the salaries of other employees.

How will you make an impact?

The Manager, Information Privacy is responsible for managing all operational activities associated with the IH Information Privacy Office. Operating within a complex, dynamic environment with multiple sites across a large geographical area, the Manager provides strategic direction, guidance, and leadership to senior executives, directors, managers, staff, and physicians on privacy impact assessments, auditing of electronic systems, managing privacy breaches. Additionally, the Manager is responsible for ensuring IH complies with provincial privacy legislation, policies, standards, and applicable industry standards.

What will you work on?

Technical
• Provides expert advice to executive, management, employees, and medical staff by interpreting privacy legislation. Liaises with public members on privacy requests and/or questions.
• Develops, implements, and maintains information privacy-related policies.
• Develops, implements, and maintains a comprehensive information privacy program encompassing staff education and awareness, incident reporting and investigations, compliance monitoring, and the resolution of breaches.
• Supports the development and implementation of standardized guidelines, policies, and forms and ensures consistent practices.
• Responsible for ensuring IH complies with provincial privacy legislation, government policies, conformance standards, and applicable industry standards.
• Works with Senior Executive, Internal Audit, Human Resources/Labour Relations, Health Information Management, Communications, Research, Directors, Managers, medical staff, and various committees to ensure IH maintains and enforces appropriate information privacy, based on related legislation, government policy, and industry standards.
• Cooperates with the Office of the Information and Privacy Commissioner, the Ministry of Health, and other legal entities in any compliance reviews or investigations.
• Identifies significant issues to senior management and provides advice on their resolution.
• Other related duties as assigned.

Administrative
• Supports and participates in the development and monitoring of an annual budget for the privacy functions and related project budgets. Responsibilities include monitoring budget performance, planning, and adjusting operations and/or staffing to meet projections and annual targets; approving expenditures; and preparing summaries for fiscal reporting. Liaises with Finance and the Corporate Director on budget matters.
• Leads the auditing of staff and external agency access to IH systems containing personal and confidential material.
• Establishes and maintains tracking and measurement systems for privacy reviews, privacy audit, and breach incidents; reports areas of risk to senior management; makes recommendations; and evaluates the effectiveness of education, training, and awareness programs.
• Establishes and maintains tracking and measurement systems for Information Sharing agreements/plans for all information sharing initiatives with external organizations.
• Formulates plans to ensure the integration of information privacy, audit, and access are inserted into the design, business practices, and supporting information infrastructures within IH.
• Evaluates and implements best practice benchmarking to enhance and administer the end-to-end local and cross-jurisdictional privacy impact assessment (PIA) risk assessment and mitigation processes.
• Sets individual, measurable goals and objectives, incorporating IH’s vision and values, goals, and corporate plan through methods such as maintaining and updating professional knowledge, developing plans for professional development, and reviewing progress with the Corporate Director to ensure that goals are achieved within established timelines.

Personnel
• Provides day-to-day operations management and oversight of the Information Privacy team including hiring, training, coaching, and managing staff.
• Establishes clear performance goals for each role and evaluates individual performance in accordance with IH policies.
• Reviews and modifies privacy workload assignments to ensure efficiency.
• Supervises and provides expert guidance to team members in their investigations, root cause analysis reporting, and prevention and quality improvement activities associated with auditing, privacy breach incidents, PIAs, and release of corporate and non-acute care records.

• In alignment with IH’s Occupational Health & Safety Program, maintain a healthy and safe work environment through complying with and implementing applicable Occupational Health and Safety Regulation, responding to requests from WSBC, identifying hazards and communicating risks, ensuring compliance with employee training, conducting effective incident investigations and implementing required corrective actions.

• Performs other related duties as required.

Interior Health strives to create an environment where you enjoy the work you do, the place where you work, and the people around you. Together, we create great workplaces. Apply today!

Honouring Interior Health’s commitment to Truth and Reconciliation and the Declaration on the Rights of Indigenous Peoples Act (DRIPA), and Pursuant to Section 42 of the BC Human Rights Code, preferential consideration and/or hiring will be given to qualified applicants who self-identify as Aboriginal (First Nations, Métis, or Inuit).

Qualfications
Education, Training, and Experience
• Masters or graduate degree in law, business, health administration or another related discipline.
• Five to seven years of recent and related experience.
• Currently enrolled or holds certification as a Certified Information Privacy Professional/Canada (CIPP/C) or other Canadian industry-recognized privacy certification.
• Relevant professional certifications in law, business, risk, or audit desirable.
• Or an equivalent combination of education, training, and experience.