Associate - Compliance, Risk & Privacy (103996)

Title: Associate – Compliance, Risk & Privacy

Department: Compliance, Risk & Privacy

Position Number: 50065082

Hours of Work: Full-Time Position; Days

Salary: Class 4 - $76,681.80 - $92,018.55 per year + benefits/pension (HOOPP)

Union: Non-Union

Location: Kingston General Hospital Site

WHY THIS ROLE MATTERS

This is the Place to contribute to work that protects patient trust, supports responsible access to information, and strengthens privacy and compliance practices across Kingston Health Sciences Centre (KHSC). In this full-time role, you will join the Compliance, Risk & Privacy team and support meaningful, detail-oriented work that helps KHSC deliver safe, respectful, patient- and family-centred care.

ABOUT THE ROLE

The Associate – Compliance, Risk & Privacy supports the Privacy Office with the intake, investigation, documentation, and resolution of privacy inquiries, complaints, breaches, correction requests, access requests, compliance reviews, and auditing activities. This role is well suited to someone who brings sound judgment, strong attention to detail, discretion, and the ability to work collaboratively with staff, leaders, physicians, patients, families, and external partners.

The role is also responsible for intake, gathering, reviewing and responding to requests for records under the Freedom of Information and Protection of Privacy Act. Additionally, the role assists with managing KHSC’s records, both onsite and those archived offsite at external locations, pursuant to KHSC’s Records Management policy, and for coordinating requests for those records.

At KHSC, every employee contributes to our strategy and to a culture of patient- and family-centred engagement and care. In this role, you will help protect confidential information, support privacy awareness, and contribute to practical improvements that reduce risk and strengthen trust across the organization.

PRIMARY RESPONSIBILITIES & DUTIES:

• Analyze and investigate privacy inquiries, complaints, and potential breaches, providing practical guidance to agents and leaders on privacy-related matters.
• Perform audits related to concerns, complaints, and corporate compliance requirements, and help identify opportunities to strengthen privacy practices.
• Document, gather, and compile information related to privacy inquiries, complaints, and breaches. Contribute to and maintain databases that support privacy statistical reporting, mandatory annual reporting to the Information and Privacy Commissioner of Ontario, and other corporate indicators.
• Intake, gathering, reviewing and responding to requests for records under the Freedom of Information and Protection of Privacy Act.
• Assisting with managing KHSC’s records, both onsite and those archived offsite at external locations, pursuant to KHSC’s Records Management policy, and for coordinating requests for those records.
• Coordinate privacy-related meetings and support the administrative and logistical needs of the Privacy and Records Management program.
• Collaborate with agents, leadership, the Privacy Officer, Human Resources, union representatives, and Medical Affairs to support timely, respectful, and well-documented resolution of privacy matters.
• NOTE: The above duties are representative and are not to be construed as all-inclusive.

QUALIFICATIONS — WHAT YOU BRING:

• Undergraduate degree or Community College diploma in law, library sciences, health information management, a health sciences-related discipline or equivalent combination of education and experience.
• Minimum of three years’ experience in an administrative, compliance, or privacy-related role within a healthcare environment, including experience supporting privacy investigations, audits, or access and correction requests while working with confidential health information.
• Strong knowledge of healthcare privacy legislation and confidentiality requirements, including PHIPA and FIPPA.
• Privacy-related certification (e.g., CIPP/C) is considered an asset.
• Ability to analyze and investigate privacy inquiries, complaints, and potential breaches with discretion, accuracy, and sound judgment.
• Excellent documentation and record-management skills, with strong attention to detail.
• Strong analytical skills to review audit results, identify compliance issues, and support practical risk-reduction strategies.
• Ability to interpret policies, procedures, and regulatory requirements and apply them consistently in a healthcare environment.
• Effective communication skills to interact professionally with leadership, staff, patients, families, and external regulatory bodies.
• Strong organizational and time-management skills to manage multiple inquiries, investigations, and reporting requirements at the same time.
• Ability to exercise sound judgment and escalate complex or contentious issues appropriately.
• Proficiency in database management, data tracking, and statistical reporting.
• Strong interpersonal skills to support collaboration with internal and external partners.
• Satisfactory criminal reference check required.

PHYSICAL REQUIREMENTS:

The applicant must be able to meet the physical demands of this position.

KHSC is located on the ancestral lands and waters of the Anishinaabeg and Haudenosaunee and serves a wider geographical area that encompasses many Indigenous communities including Tyendinaga, Katarokwi, as well as communities within the Weeneebayko Area Health Authority. As we partner in care, discovery, and learning to achieve better health outcomes for our communities, KHSC is committed to actively advocating for and acting upon the Truth and Reconciliation Committee’s Calls to Action on Health.

Unless specifically stated, all job postings are for existing positions at KHSC. KHSC is committed to recruitment practices that support and contribute to building a respectful, diverse and inclusive workplace in compliance with legislation such as the Employment Standards Act and Accessibility for Ontarians with Disabilities Act. We welcome all applications from women, racialized persons, persons with disabilities, Indigenous Peoples, persons in the 2SLGBTQIA+ community, and members of other equity deserving groups.

Kingston Health Sciences Centre may use artificial intelligence systems to assess and screen applicants. All hiring decisions are made in accordance with KHSC policies and applicable employment legislation.

We thank all applicants, but only those selected for next steps will be contacted. Kingston Health Sciences Centre is committed to inclusive and accessible employment practices. If you require an accommodation to fully participate in the hiring process, please notify the Recruitment Team.