Manager, Insurance Data & Privacy Risk Management

RBC•Mississauga, ON

1d•CA$67,000 - CA$110,000•Onsite

About The Position

Responsible for supporting the control framework for RBC Insurance and the methodology for privacy and data risk management and consulting for the Insurance portfolio. This role supports the Ins DMO Senior Manager/Director and broader Ins Data & AI teams in providing end-to-end oversight and challenge reviews (1LoD Privacy/Data Risk Officer) of Processing Activity Risk Assessments (PARAs), including Privacy Risk Assessments (PRAs) and Data Risk Assessments (DRAs) across Insurance. The role works closely with Insurance business stakeholders, Enterprise Information Management Risk (EIMR) team, Global Privacy Office (GPO), Chief Data Office (CDO), and Internal Audit, collaborating to integrate best practices, recommendations, and internal policies into privacy and data risk management at RBC Insurance. This position is critical for supporting RBC Insurance’s compliance with applicable data protection and privacy laws, as well as RBC’s Enterprise Privacy Risk Management and Information Management (data) Risk Policies.

Requirements

4-6 years in a combination of knowledge, skill and background within Data and Privacy Governance/Management or comparable discipline.
Demonstrate the ability to recommend solid solutions/processes and procedures to ensure a high level of privacy and data risk controls management.
Familiar with Archer and Collibra.
Undergraduate university degree or equivalent – Emphasis on Data, Science, Statistics or Commerce/Business.
Ability to communicate and interact effectively with senior management and business stakeholders.
Strong communication skills, and ability to synthesize data-driven insights into effective recommendations for action.
Strong problem solving, analytical (including qualitative and quantitative analysis) and research skills are essential.
Strong working experience with MS Office Professional Suite.

Nice To Haves

Knowledge of Insurance business and products and processes.
Recognized Industry Qualifications – Data Management / CIPP / CIPM or equivalent courses.
Knowledge, skill and background in either operational risk practices, audit or compliance functions, within one or more businesses in Insurance (or comparable business).

Responsibilities

Conduct privacy and data risk reviews for new and changed products/services, third party engagements (SRMA/IGA), technology implementations, and business initiatives across the Insurance portfolio.
Advise on data and privacy design requirements and support the identification and mitigation of risk exposures.
Provide consultation on projects and business initiatives, including guidance on key areas of privacy and data risks.
Design and develop enhanced risk reporting.
Identify, document, and track privacy and data risks and recommended actions (i.e., controls), reporting on the risk position as required.
Monitor and measure key privacy and data risk indicators (KRIs) and provide analysis to identify systemic issues for assessment of action plans.
Assist in the sustainment of a disciplined privacy and data risk culture.
Support the Data Control framework for RBC Insurance.
Consult and advise with project teams and assist teams in control assessment & design.
Support control management activities for Digital and Data Office controls in Archer (Risk Registry/ORMS).
Support the Standardized Approach to Key Controls (SAKC)/Risk and Controls Assessment (RCA) process required for critical and key data elements (CDEs/KDEs) to align with Enterprise Data Standards of Care.