Senior Manager, Privacy Oversight (Monitoring & Testing)

Daily Responsibilities:

As a member of the Global Privacy team, the Senior Manager, Privacy Oversight supports the Privacy Office in fulfilling its responsibilities under the bank's Regulatory Compliance Management (RCM) Framework, by monitoring & testing of 1LOD controls to manage privacy risk, across Canadian and Caribbean segments and functions.

The role also supports the execution of the Global Privacy Quality Assurance program which assesses 2LOD Privacy Officers’ adherence to the Enterprise Privacy Control Standards and internal policies and procedures, with a view to strengthening the Global Privacy program.

- Lead the completion of risk-based scope determinations to drive the annual Privacy M&T plan

to ensure appropriate coverage.

- Lead and deliver timely and accurate testing reviews that opine on the adequacy of 1LOD

systems, controls and processes to manage privacy risk in Canada and the Caribbean

- Provide an opinion on the effectiveness of the 1LOD Privacy controls in achieving compliance

with applicable regulatory requirements.

- Execute on QA reviews of 2LOD privacy controls, processes and procedures, including PARA,

PIRT (including sample based testing of non-reportable PIRT incidents), SRMA, and program-related activities.

- Work with colleagues to develop testing observations and issues requiring remediation,

review and advise on the adequacy of management actions plans to resolve issues identified.

- Drive the continual enhancement of the Privacy M&T program by developing/improving

methodology, driving the development of data analysis where relevant, and enhancing governance

processes.

- Deliver timely responses to key stakeholders, including 1LOD contacts, IAS, other risk

domains and external regulatory enquiries.

- Lead ad-hoc projects and activities as required (management requests, committee reporting,

global coordination initiatives).

Must-have Skills/Experiences:

7+ years of Experience

Strong knowledge of privacy, compliance and regulatory risk management practices

Experience working in the financial services industry; experienced Privacy Professional is an asset

Experience assessing design and operational effectiveness of internal controls

Ability to work autonomously and deliver against timelines

Proven effective communication skills

Nice-to-have Skills/Experience:

Privacy Accreditation (IAPP)

Experience executing control testing programs

Experienced Privacy Professional