Senior Manager, Health Information Governance & Privacy

Why Fred Victor?

For 130 years, Fred Victor has been a leader in helping people rebuild their lives in Toronto. Our mission is to improve the health, income and housing stability of people experiencing poverty and homelessness. We are committed to ending homelessness, one person at a time.

The Senior Manager, Health Information Governance & Privacy reports directly to the Vice President, Programs and Services and is responsible for providing strategic and operational leadership for Fred Victor's privacy management program, health information governance framework, and compliance with the Personal Health Information Protection Act (PHIPA) and other applicable privacy legislation. This role provides organization-wide leadership in the development, implementation, monitoring, and continuous improvement of policies, procedures, governance structures, and practices related to the collection, use, disclosure, retention, safeguarding, and disposal of personal health information and other sensitive personal information.

The Senior Manager, Health Information Governance & Privacy serves as the organization's subject matter expert on health information privacy, consent management, information sharing, privacy risk management, access and disclosure processes, privacy investigations, documentation quality, and information governance. The role supports the organization in meeting its obligations as a Health Information Custodian and promoting a culture of privacy, accountability, confidentiality, and information stewardship. Working in a complex and evolving environment, this role collaborates closely with operational leadership, Quality, Information Technology, Human Resources, legal counsel, external partners, and service delivery teams to identify privacy risks, strengthen compliance, support strategic initiatives, and improve information management practices across the organization.

Does this sound like work you want to be a part of?

We offer a supportive and collaborative working environment, an opportunity to join a diverse team of caring professionals and a chance to make a difference. With over 75 programs and 25 locations across the city, there are lots of opportunities to grow your career with us.

What You Will Do:

Health Information Governance Leadership

• Lead the development, implementation, and continuous improvement of Fred Victor's Health Information Governance Framework.
• Develop policies, standards, procedures, and controls governing personal health information and sensitive client information.
• Support organizational accountability for information governance, privacy, records management, and information stewardship.
• Provide strategic advice to leadership regarding privacy, information governance, regulatory compliance, and organizational risk.
• Monitor legislative, regulatory, and sector developments affecting privacy and information management and provide recommendations for organizational action.
• Develop annual privacy and information governance priorities, objectives, reporting mechanisms, and work plans.

Privacy Program Leadership and Compliance

• Lead the day-to-day operation of the organization's privacy management program.
• Develop, review, and maintain privacy policies, procedures, forms, guidelines, and educational resources.
• Provide consultation and guidance regarding privacy legislation, consent, confidentiality, information sharing, and disclosure practices.
• Ensure compliance with PHIPA and other applicable privacy legislation and regulatory requirements.
• Support organizational readiness for audits, accreditation reviews, compliance assessments, and regulatory inquiries.
• Identify privacy risks and develop mitigation strategies to reduce organizational exposure.

Access, Correction and Information Disclosure Management

• Oversee requests for access to, correction of, and disclosure of personal health information.
• Ensure compliance with legislative timelines and disclosure requirements under PHIPA.
• Review and approve complex disclosure matters and access requests involving elevated legal, privacy, or reputational risk.
• Ensure appropriate verification of identity, authority, consent, and legal authorization before disclosure.
• Maintain systems for tracking requests, disclosures, decisions, and supporting documentation.
• Provide guidance regarding subpoenas, warrants, court orders, law enforcement requests, and third-party information requests, in collaboration with legal counsel where required.

Privacy Incident, Breach and Complaint Management

• Lead investigations involving privacy complaints, breaches, unauthorized access, and confidentiality concerns.
• Coordinate containment, investigation, notification, remediation, and follow-up activities related to privacy incidents.
• Conduct root cause analyses and identify corrective and preventative actions.
• Support regulatory reporting and notification requirements.
• Monitor privacy incidents and complaints to identify systemic issues, trends, and opportunities for improvement.
• Prepare privacy-related reports and recommendations for leadership and governance committees.

Privacy Auditing and Monitoring Activities

• Develop and oversee privacy auditing and monitoring programs.
• Conduct audits of client records and electronic systems to assess compliance with privacy and documentation requirements.
• Review audit logs and monitoring reports to identify inappropriate or unauthorized access to information.
• Track corrective actions and ensure implementation of recommendations arising from audits and investigations.
• Develop privacy performance indicators, compliance reports, dashboards, and organizational reporting frameworks.
• Support continuous quality improvement related to information governance and privacy practices.

Documentation Quality and Information Management

• Lead initiatives that improve documentation quality, record integrity, and information management practices.
• Conduct documentation audits to assess compliance with organizational standards, consent requirements, and privacy obligations.
• Identify trends and deficiencies that create operational, legal, privacy, or quality risks.
• Collaborate with Quality and program leadership to strengthen documentation practices and clinical record quality.
• Support the development and implementation of documentation standards, tools, and improvement initiatives.
• Promote accurate, objective, timely, and privacy-conscious documentation practices.

Privacy Risk Assessment and Organizational Initiatives

• Lead Privacy Impact Assessments and privacy reviews for new programs, technologies, systems, partnerships, and initiatives.
• Collaborate with Information Technology and organizational leadership to strengthen privacy and information security controls.
• Assess privacy implications associated with new business processes, digital transformation initiatives, and information-sharing arrangements.
• Recommend privacy controls, safeguards, and risk mitigation strategies.
• Support organizational projects requiring privacy, information governance, or compliance expertise.

Education and Capacity Building

• Develop and implement a comprehensive privacy and health information governance education program.
• Deliver privacy, confidentiality, PHIPA, consent, documentation, and breach response training.
• Develop awareness campaigns, learning materials, and guidance resources.
• Provide coaching and consultation to managers, supervisors, and staff regarding privacy responsibilities.
• Promote ongoing organizational awareness of privacy obligations and information governance principles.

Stakeholder Engagement and Collaboration

• Build and maintain productive relationships with internal and external stakeholders.
• Collaborate with Information Technology, Quality, Human Resources, Legal Counsel, and program leadership regarding information governance matters.
• Participate on internal committees, working groups, and organizational initiatives.
• Represent Fred Victor in sector forums, committees, and partnerships related to privacy and health information management.
• Assist in preparing reports, briefing notes, presentations, recommendations, and communications for senior leadership and governance bodies.

What You Bring to the Team:

• University degree in Health Information Management, Health Administration, Public Administration, Information Management, Business Administration, Law, Privacy Management, or a related discipline.
• Professional certification in privacy, health information management, information governance, or related field is considered an asset (e.g., CHIM, CIPP/C, CIPM, CPHIMS).
• Minimum 5 years of progressively responsible experience in privacy, health information management, information governance, compliance, healthcare administration, or a related field.
• Demonstrated expertise interpreting and applying PHIPA and health information privacy legislation.
• Experience conducting privacy investigations, privacy audits, Privacy Impact Assessments, and risk assessments.
• Experience developing organizational policies, procedures, governance frameworks, and compliance programs.
• Experience supporting organizational leadership and driving enterprise-wide initiatives.
• Advanced proficiency in Microsoft Office applications, reporting tools, databases, and electronic record systems.
• Experience within a social services, healthcare, community services, non-profit, or regulated environment is preferred.

What Sets You Apart:

• Strong leadership and relationship management skills.
• Excellent judgment, discretion, and professionalism.
• Ability to manage highly confidential and sensitive information.
• Strong analytical, critical thinking, and problem-solving skills.
• Excellent investigation and assessment skills.
• Attention to detail and accuracy.
• Advanced written communication and report-writing skills.
• Ability to interpret complex legislative and regulatory requirements.
• Strong presentation, facilitation, and stakeholder engagement skills.
• Solutions-focused with a commitment to continuous improvement.
• Ability to manage competing priorities and complex organizational issues.
• Strong organizational and project management skills.
• Demonstrated commitment to anti-oppression, equity, inclusion, and client-centered service delivery.

Working Environment:

• The Senior Manager, Health Information Governance & Privacy works primarily from the Fred Victor administration office at 36 Lombard Street with hybrid scheduling available based on operational requirements.
• Travel to Fred Victor program sites and administrative offices may be required.

Compensation and Benefits:

• For the Senior Manager, Health Information Governance & Privacy, Fred Victor offers a salary range of $86,580.00 to $108,205.50 annually
• 4 weeks of vacation to start + 1 float day
• Generous paid sick leave allowance
• A comprehensive Dental, Extended Health and LTD group benefits package includes individual and family coverage, including prescriptions, hospital accommodation, hearing care, paramedical practitioners and a wide variety of dental care. Additional insurance includes vision care and travel for emergency medical services.
• 6.5 % of your gross salary will be contributed to a group RRSP on your behalf after successful completion of probation; you will contribute 4% of your gross salary to the same RRSP
• Access to employee and family assistance plan