Privacy Analyst and Senior Privacy Advisor

Role Responsibilities

The Privacy Analyst and Senior Privacy Advisor are key roles within the Strategic Data Analytics & Business Services Branch, supporting the Ministry’s responsibilities as a custodian under the Health Information Act (HIA). The Privacy Analyst contributes to privacy compliance by conducting audits, supporting investigations, and preparing reports that assess and improve privacy practices across the organization. The Senior Privacy Advisor, reporting to the Privacy Manager, leads the implementation of the Privacy Management Program, coordinates access to information requests, prepares Privacy Impact Assessments, and provides strategic guidance on privacy legislation, policy, and records management. Both roles involve collaboration with program areas, legal teams, and external stakeholders, including the Office of the Information and Privacy Commissioner (OIPC), and play a vital role in strengthening privacy compliance and governance across the Ministry.

Privacy Analyst (Program Services 3MA):

•    Conduct privacy compliance audits of data collection, use, access, storage, and disclosure practices.
•    Support investigations into privacy breaches and assist with root cause analysis and mitigation planning.
•    Draft audit reports, investigation summaries, and recommendations for internal and external stakeholders.
•    Assist in developing and implementing audit tools, procedures, and risk assessment frameworks.
•    Provide subject matter expertise on privacy legislation and compliance requirements.
•    Liaise with program areas to support continuous improvement in privacy practices.

Role Responsibilities Continued

Senior Privacy Advisor (Program Services 4MA)

•    Advise program areas on privacy obligations under HIA, offering guidance informed by legislation, policy, and best practices.
•    Develop and maintain privacy-related policies, procedures, and training materials; deliver sessions to staff and service providers.
•    Research and analyze Commissioner’s Orders and judicial interpretations to support informed privacy recommendations.
•    Assess alleged privacy contraventions, evaluate risk and harm, and guide departmental response coordination.
•    Maintain expert knowledge of ATIA, POPA and HIA acts to process access requests and apply disclosure exemptions appropriately.
•    Coordinate access requests across the department and affiliated organizations, ensuring compliance with statutory requirements.

•    Facilitate and prepare Privacy Impact Assessments (PIAs) for submission to the OIPC.
•    Conduct internal privacy compliance reviews and stay informed on emerging privacy and information security risks.

APS Competencies

Competencies are behaviors that are essential to reach our goals in serving Albertans. We encourage you to have an in depth understanding of the competencies that are required for this opportunity and to be prepared to demonstrate them during the recruitment process.

This link will assist you with understanding competencies:
https://www.alberta.ca/system/files/custom_downloaded_images/psc-alberta-public-service-competency-model.pdf.

Creative Problem Solving
•    Investigates privacy breaches and compliance issues by engaging diverse stakeholders and conducting root cause analysis.
•    Develops innovative solutions to complex privacy challenges, balancing legal requirements with operational realities.
•    Leverages cross-ministry resources and external best practices to enhance privacy program effectiveness.
•    Facilitates open dialogue and encourages idea generation to address risks and improve privacy systems.
Driven for Results
•    Delivers high-quality Privacy Impact Assessments and audit reports within legislated timelines.
•    Proactively identifies and mitigates privacy risks, ensuring continuous compliance with HIA, POPA, and ATIA.
•    Tracks and reports on privacy program performance, using metrics to drive accountability and improvement.
•    Demonstrates persistence and ownership in resolving privacy issues and implementing corrective actions.
Systems Thinking
•    Understands the interconnectedness of privacy legislation, policy frameworks, and operational processes.
•    Designs and improves privacy tools, procedures, and training that align with broader organizational goals.
•    Anticipates downstream impacts of privacy decisions and integrates long-term risk mitigation strategies.
•    Applies a holistic lens to privacy audits and investigations, identifying patterns and systemic gaps.

APS Competencies Continued

Building Collaborative Environments
•    Builds strong relationships with program areas, service providers, and external stakeholders to support privacy compliance.
•    Facilitates knowledge sharing and promotes a culture of privacy awareness across departments.
•    Encourages inclusive engagement in privacy initiatives, ensuring diverse perspectives are considered.
•    Supports team learning through training, mentorship, and collaborative problem-solving.

Qualifications

Minimum Recruitment Standards:

Privacy Analyst - Program Services 3MA Requirements:
•    University graduation (Public Administration) or in a related field plus two (2) years progressively responsible related experience; or equivalent as described below.

Equivalencies: Directly related experience or education considered on the basis of: 
•    1 year of education for 1 year of experience; or
•    1 year of experience for 1 year of education.

Senior Privacy Advisor - Program Services 4MA Requirements:
•    University graduation (Public Administration) or in a related field plus four (4) years progressively responsible related experience; or equivalent as described below.

Equivalencies: Directly related experience or education considered on the basis of: 
•    1 year of education for 1 year of experience; or
•    1 year of experience for 1 year of education.

Asset: Certification in information access and protection of privacy

Minimum recruitment standards outline the minimum education and experience required for appointment to a job classification. 
Refer to https://www.alberta.ca/alberta-public-service-minimum-recruitment-standards.

Notes

Hours of Work
•    7.25 Daily Hours
•    36.25 Weekly Hours
•    8:15AM to 4:30PM (Monday to Friday)

Location: Edmonton

For your application to be considered, a cover letter explaining your qualifications and suitability for the role must be attached with your application.

Final candidates will be required to undergo a security screening.

Any costs associated with obtaining the required documents/checks as noted or interview travel expenses, will be the responsibility of the candidate. Out-of-province applicants can obtain the required documents/checks from the province they currently reside in. 

Links and information on what the GoA have to offer to prospective employees.

•    Working for the Alberta Public Service - https://www.alberta.ca/advantages-working-for-alberta-public-service.aspx.
•    Public Service Pension Plan (PSPP) - https://www.pspp.ca.
•    Alberta Public Service Benefit Information - https://www.alberta.ca/alberta-public-service-benefits.
•    Professional learning and development - https://www.alberta.ca/professional-development-support-directive.
•    Research Alberta Public Service Careers tool – https://researchapscareers.alberta.ca.
•    Positive workplace culture and work-life balance.
•    Opportunity to participate in flexible work arrangements such as working from home up to two days per week and modified work schedule agreement.
•    Leadership and mentorship programs.