Overseeing RBC’s compliance with applicable data protection and privacy laws as well as RBCs Enterprise Privacy Risk Management Policy as it relates to HR/Employee data
Support the maintenance and enhancement of the Global Privacy Program for Human Resources in Canada, the USA and the Caribbean
Responsible for the handling of all individual (employee) rights requests in compliance with applicable data privacy laws and regulations
Be responsible for privacy & compliance regulatory requirements in Canada, the USA and the Caribbean leveraging knowledge to monitor, review, report, fulfill and service Privacy Incidents
Ensure appropriate handling of Canada, USA and Caribbean based privacy complaints, responding to privacy queries and complaints from employees in a timely manner and accurate manner
Identify, document and track privacy risks and recommend actions, reporting of the risk position as required through formal organizational risk management processes
Initiate and own risk mitigation methodologies required to prudently manage risk exposures applicable to HR/Employee data
Develop service partnerships with business stakeholders, Group Risk Management and Compliance in identifying risk-related issues
Support and advise on the management of HR/Employee data incidents and breaches, in line with privacy legislation and local specific policies
Support the Privacy Risk program for Human Resources by developing and facilitating privacy training to improve employee awareness
Drive culture of privacy within Human Resources by advocating for privacy by design and integration of the RBC privacy principles.
Requirements
Strong privacy background, including minimum of 5 years privacy experience
Technical knowledge of data protection laws, regulations and practices in Canada
Strong analytical (qualitative and quantitative) and problem-solving skills with focus on attention to detail
Strong administrative, documentation, planning and organizational skills
Proven ability to manage multiple high-priority DSAR projects simultaneously
Self-sufficient with the ability to work independently and in a team environment
Experience with process mapping, documentation, and continuous improvement initiatives
Aptitude for learning technical systems and applications (not limited and as applicable to role and primary responsibilities): MS products – Excel, Word, Access, Outlook etc.
Technical knowledge of data protection laws, regulations and practices in the USA and the Caribbean and experience of applying these in practice.