Privacy Impact Assessment Specialist SME - Toronto, ON - MSON

Job Title: Senior Privacy Impact Assessment (PIA) SME
Job Category: Privacy, Risk & Compliance
Location: Toronto, ON
Job Type: Contract
Experience: 9+ Years
Pay Rate: CAD $1,000+ per day

Note: This job doesn't offer any benefits.

Position Overview

We are seeking a Senior Privacy Impact Assessment (PIA) Subject Matter Expert (SME) to provide strategic leadership in privacy risk management, regulatory compliance, and privacy-by-design practices. The role oversees complex, high-risk assessments, establishes assessment methodologies, and advises senior stakeholders on enterprise privacy risks.

Required Qualifications

• Degree in Law, Privacy, Information Management, Information Technology, Public Administration, or a related field, or equivalent professional experience.

• 9+ years of relevant experience in privacy management, PIA leadership, regulatory compliance, or privacy risk consulting.

• Extensive expertise in Privacy Impact Assessments and privacy risk management.

• Advanced understanding of FIPPA and public-sector privacy governance.

• Expertise in data-flow modeling, business-process analysis, and information lifecycle management.

• Strong understanding of privacy-by-design, data minimization, access controls, and information-sharing risks.

• Demonstrated experience leading complex privacy assessments and advising senior stakeholders.

• Experience developing privacy assessment frameworks, governance standards, and quality assurance processes.

• Strong leadership, analytical, facilitation, report-writing, and decision-support skills.

Preferred Qualifications

• Experience in government or other highly regulated environments.

• Advanced privacy certifications, such as CIPP/C or CIPM.

Responsibilities

• Lead and oversee complex, high-impact Privacy Impact Assessments across enterprise and public-sector programs.

• Establish PIA methodologies, assessment standards, review procedures, and quality assurance practices.

• Provide expert interpretation of FIPPA and advise stakeholders on privacy obligations and compliance risks.

• Evaluate complex data flows, business processes, information-sharing arrangements, and technology architectures.

• Assess privacy risks associated with new technologies, system integrations, cloud platforms, analytics, and third-party services.

• Develop risk-based recommendations, mitigation strategies, and privacy control frameworks.

• Advise senior leadership, legal counsel, privacy officers, program directors, and technical architects on privacy matters.

• Integrate privacy-by-design and data-minimization principles into enterprise architecture and project governance.

• Review and approve assessment findings, risk ratings, mitigation plans, and final PIA reports within delegated authority.

• Establish governance processes for tracking privacy risks, remediation actions, and compliance obligations.

• Provide guidance on privacy incidents, regulatory inquiries, audit findings, and complex privacy issues.

• Mentor junior and senior privacy specialists and provide expert review of their assessments.

• Support the development of organizational privacy policies, standards, procedures, and training materials.

• Identify emerging privacy risks and recommend improvements to privacy governance and assessment practices.

Expected Deliverables

• Enterprise-level PIA reports and expert assessment reviews.

• Privacy risk frameworks, methodologies, and governance standards.

• High-risk privacy assessments and strategic mitigation plans.

• Executive briefings and regulatory compliance recommendations.

• Quality assurance reviews and specialist guidance for privacy teams.