Privacy Compliance Oversight Manager

TD•Portland, ME

1d•$91,000 - $113,360

About The Position

The US Privacy Office develops, manages, and oversees the US Privacy Compliance Program, working with Risk Owners and Oversight Functions to promote compliance with privacy-related laws, rules, and regulations. Its work includes privacy notices and policies, privacy event management, regulatory change engagement, monitoring, training and awareness, and issue management and reporting. During the first year, this role will primarily support a merger and acquisition project by assessing privacy risks and overseeing privacy milestones through planning, testing, and conversion. After conversion, the role will provide advice, support, and objective guidance and challenge to assigned portfolios, businesses, or functions, and develop and maintain Privacy Compliance in accordance with the Bank’s Privacy Policies and Standards and applicable privacy laws, rules, and regulations. The position works closely with senior personnel in US Privacy, Global Privacy, US Compliance, and business-line Privacy Designates. The role independently manages a specialized compliance area and provides coverage across significant business or functional areas and relevant legal entities and jurisdictions. It offers advanced analysis and reporting, guidance to analysts, subject-matter expertise, and support in regulatory reviews, inquiries, audits, and exams. The manager also leads resolution of complex project and program issues. The position requires collaboration, sound judgment, discretion with confidential information, and the ability to manage priorities and multiple deadlines in a changing environment.

Requirements

Undergraduate degree or equivalent work experience.
At least 7 years of experience.
Proficient knowledge of products and services, systems, compliance advisory standards and procedures, and privacy laws, rules, regulations, and controls.
Knowledge of the risk management environment, standards, and regulations.
Skill in using computer applications, including MS Office.
Effective oral and written communication skills.
Ability to work collaboratively, build relationships, and work both independently and as a team member.
Sound judgment and decision-making ability.
Ability to analyze, organize, and prioritize work while meeting multiple deadlines.
Ability to handle confidential information with discretion.

Nice To Haves

At least 5 years of adept knowledge of mergers and acquisitions.
CIPP/US Certification.

Responsibilities

Assess privacy risks and oversee privacy milestones during merger and acquisition planning, testing, and conversion.
Perform Privacy Monitoring.
Review Privacy Impact Assessments.
Oversee privacy regulatory applicability mapping.
Review and challenge controls addressing privacy regulatory requirements.
Record and oversee privacy regulatory issues.
Oversee and challenge privacy aspects of business-line procedures, projects, and processes.
Advise the business about new or changed compliance regulatory and policy requirements.
Analyze data and complex business issues, identify regulatory opportunities and issues, and recommend actions.
Contribute to the development and implementation of Compliance programs and guide partners in developing, implementing, overseeing, and managing effective programs.
Prepare summaries, presentations, briefing notes, and other documentation reporting Compliance status.
Represent Compliance on internal or external committees as required and provide subject-matter expertise and advice to business management.
Analyze functional or enterprise-level results, assess program and policy effectiveness, and make recommendations.
Oversee management reporting and analysis functions through review and approval.
Manage high-risk initiatives and escalations and lead initiatives or provide guidance as appropriate.
Assist in developing Compliance Team procedures and facilitate periodic Compliance risk and self-assessment activities for designated businesses.
Monitor timely completion and communication of assessments, including monitoring and risk assessments.
Manage risk assessments for assigned businesses and promote resolution of escalated, high-risk issues.
Conduct internal and external research and support management or broader-audience presentations and communications.
Manage relationships across business lines and control functions, promoting alignment with enterprise and regulatory requirements.
Keep abreast of emerging issues, trends, and regulatory requirements and assess their potential impact.
Maintain a risk-management and control culture aligned with risk appetite.
Participate in team activities, knowledge transfer, personal development, cross-training, and mentorship; keep colleagues informed about project progress and relevant information.
Develop productive relationships with internal and external partners and contribute to a fair, positive, and equitable work environment.
Provide thought leadership and industry knowledge in the area of expertise.