Reporting to the Manager of Risk Management and Privacy Compliance, the Privacy & Information Security Coordinator will participate in key functions of Privacy, Access, and Information Security, including privacy & security audits, risk assessments, staff education, policy development and review, and investigations. The Privacy & Information Security Coordinator is responsible for confidential processing and managing of formal access and information sharing requests for Vancouver School Board records including assisting in reviews or inquiries of the Office of the Information and Privacy Commissioner, in compliance with the Freedom of Information and Protection of Privacy Act (the Act) and VSB policies.
The Coordinator liaises with the public and other third parties in support of preparing and processing records subject to a request under the Act. The Coordinator administers the request management process by reviewing relevant records and interpreting applicable sections of the Act to support the process of redaction of personal information. The Coordinator prepares and sends the final response to the applicant. The Coordinator participates in day-to-day information access and privacy analysis and trending, privacy breach management and prevention activities and compliance/risk monitoring of the VSB.
Job Duties and Responsibility:
Comprehensive knowledge of applicable access and privacy regulations and legislation and their application to records in paper and electronic mediums.
Demonstrated skills and abilities in researching, interpreting and applying the Act to corporate records.
Strong assessment and problem solving skills, including ability to research, analyze, interpret and summarize issues.
Perform privacy impact assessments and vulnerability assessments and coordinate the execution of these within the corporate context, as well as oversee the remediation activities associated with vulnerability/risk findings
Work in partnership with the Learning and Technology Department to monitor current trends of malware and intrusions
Assist in the development and enforcement of departmental and corporate policies and procedures associated with privacy, information security and access controls based on industry best practice and managerial direction including the development of the corporate personal information bank
Coordinates internal and external audits and maintains Information Security related documents including confidential data about existing risks
Supports Cyber Incident response process
A level of education, training and experience equivalent to a Diploma or Certification in Access and Privacy such as PACC.
Information Management, or related field with evidence of continuing professional development in the area of information access and management and three (3) to five (5) years’ recent progressive experience with a minimum of one (1) year recent direct experience in severing corporate records in compliance with FOIPPA.
Previous work experience with privacy and information security is considered an asset
Proficient computer skills and ability to operate related equipment and software applications such as SharePoint, Microsoft Word, Excel, Outlook and Explorer, and other related applications.
Demonstrated ability to manage a caseload and to plan, implement, organize and problem solve in a dynamic environment.
Demonstrated ability to work under pressure and adapt and respond to changing priorities and deadlines.
Demonstrated organization skills and the ability to prioritize tasks and meet stringent legislated timelines.
Demonstrated excellent interpersonal and oral and written communication skills, including ability to foster and maintain good working relationships with maturity, tact, confidentiality and discretion;
Ability to function independently with minimal direction and as part of a team.
Demonstrated knowledge and experience in training and presentations
Responsible, energetic individual with above average ability to organize and prioritize duties
Ability to thrive in a busy environment; where multi-tasking is essential and the quality of work must be professional.
Closing Date: August 12, 2018 at 4:30 p.m.