Status: Regular, Full-time
Work Location: Hybrid, Vancouver B.C. (a minimum of 2 days in office)
What you'll be doingThe Privacy & Access Specialist (PAS) operationalizes and facilitates BCCNM's privacy management program and supports Freedom of Information (FOI) requests in accordance with relevant legislation and policies. The PAS leads Privacy Impact Assessments (PIAs) and supports the implementation and ongoing monitoring of resulting privacy controls and recommendations. This role identifies opportunities to improve processes relating to the collection, processing, storage, and disclosure of personal information to enable BCCNM to carry out its mandate and business activities.
More specifically, the PAS works closely with the Information Management team to identify and to review records to respond to requests under the Freedom of Information and Protection of Privacy Act, BC (FIPPA). The PAS works in consultation with internal legal counsels to clarify the scope of complex and time-sensitive access requests, determine if exemptions to rights to access are applicable, and to prepare responsive records in the custody or control of BCCNM. In addition, the PAS works with the Business Analysts and Project Managers to bridge project work with structured processes for managing personal information and to incorporate privacy related requirements in project work.
Key Responsibilities- In consultation with the SCLC, designs, develops and implements privacy compliance programs, including board and committee member, staff and contractor training, monitoring and evaluation. The PAS educates internal programs on awareness of privacy trends and changes in technology use and privacy legislation that impact BCCNM.
- The PAS, in consultation with and under the direction of the SCLC, supports the College wide implementation of privacy requirements under FIPPA, Health Professions and Occupations Act (HPOA) BC and the BCCNM Bylaws.
- Leads and conducts PIAs, supports the completion of risk assessments, and conducts related ongoing compliance monitoring activities in consultation with IT security, the project, business units, and contract resources in the Privacy Office.
- Leads the ongoing lifecycle management of PIAs, including maintaining PIA inventories, tracking recommendations and mitigation measures, monitoring implementation status, conducting follow up reviews, and reporting on outstanding privacy risks and compliance activities.
- Collaborates with internal and external partners on programs and projects which may involve the handling and sharing of information across the College and with other organizations, users, clients, suppliers, and partners to ensure the protection of personal information of registrants and staff.
- Documents and analyzes personal information life cycles, data flows, information sharing arrangements and cross-system integrations to support privacy assessments and compliance activities. Working closely with SCLC and the respective program areas, supports management of information sharing agreements and related processes.
- Works with SCLC and relevant partners in defining the College's protection goals and to apply and operationalize these goals with business process owners.
- In consultation with the SCLC, analyses and proposes development and implements organization-wide privacy policies and procedures including without limitation:
- Privacy and initiative development processes;
- Privacy policies and various privacy notices;
- Authorization and consent forms;
- Individual requests for correction of or access to information; and
- Access and verification requests
- Ensures clarity on what the College sees as Freedom of Information requests, and designs college-wide processes and training so that FOI requests are centrally tracked and responded to as expected.
- Manages complex and sensitive FOI requests and related privacy matters, including review of records for disclosure and redaction, application of statutory exceptions, and consultation with SCLC and business areas regarding access and privacy risks. Provides operational guidance and technical expertise to other staff involved in processing FOI requests and acts as the escalation point for complex or high - risk matters.
Your education and skills- Degree in Law, Information Management, Computer Science, Information Systems or a related discipline, or equivalent education/experience supplemented by continuing professional development in privacy
- A minimum of 5 years' experience in a privacy and access to information role, including managing technical privacy compliance components, PIAs and successful implementation and management of all aspects of cross-functional privacy projects/programs.
- Certification as an Information Privacy Professional (CIPM, CIPP/C or CIPT) preferred.
- Strong knowledge of BC's FIPPA and the HPOA, including experience in interpreting legislative privacy requirements and applying them in operational environments.
- Demonstrated experience independently leading PIAs from initiation through implementation, review, and ongoing monitoring including technical analysis of system architecture, information flows, data integrations, privacy and security controls, risks and mitigation strategies as well as developing and improving related processes.
- Understanding of common privacy industry standards and regulations and experience with industry frameworks preferred.
- Experience working on privacy focused projects such as Privacy-by-Design, privacy enhancing technologies. Experience supporting business understanding and maintaining compliance with privacy laws as well as privacy and information governance policy.
- Comfortable acting as a privacy champion, able to communicate effectively to stakeholders about privacy requirements and processes relating to freedom of information requests.
- Ability to exercise discretion and diplomacy in handling confidential information and to build effective working relationships with a diverse range of internal and external parties, including College staff, FOI requestors health profession regulators, and other organizations.
- Strong communications, interpersonal and relationship building skills as well as collaboration, and critical thinking/problem solving abilities.
- Advanced proficiency using MS Office suite. Working level knowledge of MS CRM Dynamics and MS SharePoint.
- Knowledge of cloud computing technologies and its impact on data privacy is highly preferred.
- Outstanding organizational skills and attention to detail.
- Privacy and FOI experience in a public body is an asset
- Knowledge of Canadian colonial impacts on Indigenous people in social and health contexts, including social, economic, political, and historical realities impacting Indigenous communities and knowledge of Indigenous-specific anti-racism and accompanying reports (e.g. The Truth & Reconciliation Commission's 94 Calls to Action (2015), the In Plain Sight Report (2020), and Reclaiming Power and Place's Calls for Justice (2019)) is an asset.
- Demonstrated understanding of equity, diversity, inclusion, and cultural humility as they apply to health care is an asset.
How to ApplyIf you are interested in this position, please by 11:59pm on October 31, 2026. This opportunity will remain posted until filled; however, priority consideration will be given to those who apply by the deadline. To see a full list of our current opportunities or to learn more about working at the BC College of Nurses & Midwives, please visit our website at Careers at BCCNM.
