Manager | Information Privacy

Position Summary
Interior Health is seeking permanent full-time Manager, Information Privacy who is passionate about driving meaningful changes in healthcare.

Location: The worksite location is flexible within British Columbia.

What we offer:
• Employee & Family Assistance Program
• Employer paid training/education
• Employer paid vacation
• Employer paid insurance premiums
• Extended Health & Dental coverage
• Work-life balance
• May be eligible to contribute to MPP

The salary range for this position is $108,147 (min) to $135,184 (midpoint) to $155,461 (max) per annum, based on 1.0 FTE. Interior Health typically establishes salaries within the minimum and midpoint of the salary range based on qualifications, experience of the applicant, and an internal equity review of the salaries of other employees.

How will you create an impact:
The Manager, Information Privacy is responsible for managing all operational activities associated with the IH Information Privacy Office. Operating within a complex, dynamic environment with multiple sites across a large geographical area, the Manager provides strategic direction, guidance, and leadership to senior executives, directors, managers, staff, and physicians on privacy impact assessments, auditing of electronic systems, managing privacy breaches. Additionally, the Manager is responsible for ensuring IH complies with provincial privacy legislation, policies, standards, and applicable industry standards.

What will you work on:
Technical
• Provides expert advice to executive, management, employees, and medical staff by interpreting privacy legislation. Liaises with public members on privacy requests and/or questions.
• Develops, implements, and maintains information privacy-related policies.
• Develops, implements, and maintains a comprehensive information privacy program encompassing staff education and awareness, incident reporting and investigations, compliance monitoring, and the resolution of breaches.
• Supports the development and implementation of standardized guidelines, policies, and forms and ensures consistent practices.
• Responsible for ensuring IH complies with provincial privacy legislation, government policies, conformance standards, and applicable industry standards.
• Works with Senior Executive, Internal Audit, Human Resources/Labour Relations, Health Information Management, Communications, Research, Directors, Managers, medical staff, and various committees to ensure IH maintains and enforces appropriate information privacy, based on related legislation, government policy, and industry standards.
• Cooperates with the Office of the Information and Privacy Commissioner, the Ministry of Health, and other legal entities in any compliance reviews or investigations.
• Identifies significant issues to senior management and provides advice on their resolution.

Administrative
• Supports and participates in the development and monitoring of an annual budget for the privacy functions and related project budgets. Responsibilities include monitoring budget performance, planning, and adjusting operations and/or staffing to meet projections and annual targets; approving expenditures; and preparing summaries for fiscal reporting. Liaises with Finance and the Corporate Director on budget matters.
• Leads the auditing of staff and external agency access to IH systems containing personal and confidential material.
• Establishes and maintains tracking and measurement systems for privacy reviews, privacy audit, and breach incidents; reports areas of risk to senior management; makes recommendations; and evaluates the effectiveness of education, training, and awareness programs.
• Establishes and maintains tracking and measurement systems for Information Sharing agreements/plans for all information sharing initiatives with external organizations.
• Formulates plans to ensure the integration of information privacy, audit, and access are inserted into the design, business practices, and supporting information infrastructures within IH.
• Evaluates and implements best practice benchmarking to enhance and administer the end-to-end local and cross-jurisdictional privacy impact assessment (PIA) risk assessment and mitigation processes.
• Sets individual, measurable goals and objectives, incorporating IH’s vision and values, goals, and corporate plan through methods such as maintaining and updating professional knowledge, developing plans for professional development, and reviewing progress with the Corporate Director to ensure that goals are achieved within established timelines.

Personnel
• Provides day-to-day operations management and oversight of the Information Privacy team including hiring, training, coaching, and managing staff.
• Establishes clear performance goals for each role and evaluates individual performance in accordance with IH policies.
• Reviews and modifies privacy workload assignments to ensure efficiency.
• Supervises and provides expert guidance to team members in their investigations, root cause analysis reporting, and prevention and quality improvement activities associated with auditing, privacy breach incidents, PIAs, and release of corporate and non-acute care records.

• In alignment with IH’s Occupational Health & Safety Program, maintain a healthy and safe work environment through complying with and implementing applicable Occupational Health and Safety Regulation, responding to requests from WSBC, identifying hazards and communicating risks, ensuring compliance with employee training, conducting effective incident investigations and implementing required corrective actions.

• Performs other related duties as assigned.

Come join our team and see why we’re one of BC’s Top Employers! Explore our extensive benefits, career growth opportunities, and lifestyle in one of the most beautiful and diverse regions of Canada. Ready to love where you live and work? Apply Today!

Honouring Interior Health’s commitment to Truth and Reconciliation and the Declaration on the Rights of Indigenous Peoples Act (DRIPA), and Pursuant to Section 42 of the BC Human Rights Code, preferential consideration and/or hiring will be given to qualified applicants who self-identify as Indigenous (First Nations, Métis, or Inuit).

Qualfications
Education, Training and Experience
• Master’s or graduate degree in law, business, health administration or another related discipline.
• Five to seven years of recent and related experience.
• Currently enrolled or holds certification as a Certified Information Privacy Professional/Canada (CIPP/C) or other Canadian industry-recognized privacy certification.
• Relevant professional certifications in law, business, risk, or audit desirable.
• Or an equivalent combination of education, training, and experience.

Skills and Abilities
• Good knowledge of administrative organization and systems and experience in interpretation of legislation for policy development is desired.
• Demonstrated expertise in the area of Provincial and Federal privacy legislation and an understanding of contractual requirements including information sharing and data access agreements; current practices and standards in information privacy, audit, and access; best practices; and application of software implemented within IH.
• Experience in information privacy concepts, tools, and methods; education; complaints investigation; and the use of privacy assessment tools such as privacy impact assessments.
• Comprehensive knowledge of applicable privacy regulations and legislation and a solid understanding of issues related to health information protection.
• Demonstrated leadership skills and the ability to provide leadership across multiple sites.
• Demonstrated ability to function effectively in a highly dynamic environment, including working under pressure, adapting, and responding to changing priorities and meeting deadlines.
• Demonstrated interpersonal and relationship-building skills, with the ability to provide leadership to a diverse team and interact comfortably with a variety of disciplines at all levels of the organization and to clearly present a message to a variety of audiences.
• Demonstrated project management abilities.
• Demonstrated strong facilitation and negotiation skills.
• Ability to develop and implement strategic plans, policies, procedures, and standards.
• Ability to exercise tact, good judgement, and confidentiality.
• High degree of proficiency with standard and advanced features of MS Office Suite (such as Microsoft Word, SharePoint, Outlook and PowerPoint).
• Ability to travel.
• Physical ability to perform the duties of the position.