Privacy & Security Manager

About the role

The Privacy & Security Manager leads William Osler Health System’s privacy and freedom of information program, ensuring alignment with the organization’s vision, mission, and values. Reporting to the Director of Cybersecurity, Privacy & HIM, the role combines strategic direction with hands‑on risk management across privacy, access, and emerging AI compliance.

Key responsibilities

• Review existing privacy processes, identify gaps, and propose improvements.
• Document risks and benefits of new privacy technologies and processes.
• Conduct environmental scans of peer organizations and benchmark against PHIPA/FIPPA standards.
• Monitor legislative changes, IPC orders, and court decisions to update policies.
• Analyze FOI requests, privacy incidents, complaints, and inquiries to determine risk and response.
• Develop, implement, and enforce privacy policies, corporate protocols, and mitigation activities.
• Provide mentorship and education to program staff and stakeholders.
• Oversee privacy inquiries, complaints, and breach investigations from intake to resolution.

Required profile

• Strong knowledge of Canadian health privacy legislation (PHIPA, FIPPA) and related case law.
• Proven experience in leading privacy or security programs within a healthcare setting.
• Excellent stakeholder engagement and communication skills.
• Ability to conduct risk assessments and develop mitigation strategies.
• Leadership experience managing a multidisciplinary privacy team.

Required skills

What we offer

• Hybrid work arrangement.
• Opportunity to shape privacy practices in a leading health system.
• Collaborative environment with cross‑functional teams.