Senior Analyst, Privacy & Compliance

Foresters Financial•Toronto, ON

6d•CA$65,000 - CA$95,000•Hybrid

About The Position

Reporting to the AVP, Privacy & Compliance at Foresters Financial, the Senior Analyst, Privacy & Compliance, is responsible for supporting, maintaining, and evolving a robust North American privacy program at a growing member-based life insurer. The Senior Analyst joins a small, dynamic Compliance team responsible for oversight, guidance, advice, and effective challenge to meet Foresters’ obligations with respect to management of compliance risks. The role will also support the broader Compliance team’s goals.

Requirements

Minimum of 7+ years of directly related work experience in privacy compliance, ideally at a Canadian or US financial institution.
Understanding of privacy compliance risk management impacting Canadian and US financial services organizations, ideally including life insurance.
Sound professional judgment to identify and escalate issues, assess risks and controls, and develop recommendations.
Strong critical thinking and analytical skills with a focus on pragmatic problem solving.
Experience distilling complex legal concepts into effective operational solutions.
Collaboration and communications skills (oral, written, presentation), ability to build relationships, engage and influence others.
Post-secondary degree (or equivalent work experience).

Nice To Haves

Experience in vendor privacy due diligence is an asset.
Bilingual proficiency in English and French is desirable.
Professional privacy certifications or designations (e.g. CIPP or equivalent) is an asset.

Responsibilities

Work with the AVP, Privacy & Compliance, the team, and business units to operate an effective privacy program in compliance with applicable laws and consistent with the organization’s compliance risk tolerance and that supports Foresters success.
Investigate and respond to privacy-related issues, breaches, or incidents, including identifying relevant facts, any control deficiencies or failures, and ensuring prompt remediation including the preparation of any required regulatory or individual notices.
Conduct privacy impact assessments by working effectively with impacted business units to comply with applicable laws and produce meaningful business and compliance outcomes.
Support business and membership initiatives, including leading the assessment of privacy risks and development of practical and effective privacy risk mitigants.
Provide privacy support to cybersecurity incident management, such as timely preparation of regulatory reporting, individual notices and tracking of incident response steps relative to reporting obligations.
Provide privacy support to the AI governance program, including the identification and evaluation of privacy risks relative to proposed AI implementations.
Ensure the execution of corrective action plans for identified privacy compliance issues.
Actively monitor and assess applicable regulatory developments, trends, and best practices.
Support a culture of privacy compliance by being a privacy advocate who can effectively communicate the benefits of sound privacy practices to stakeholders.
Liaise with third parties to support their effective privacy practices relative to Foresters.
Execute vendor privacy due diligence reviews through the Foresters third-party risk management framework.
Work with Foresters UK business as required to support enterprise-wide privacy work or individual initiatives.
Respond to data subject requests.
Support the operation of a regulatory compliance monitoring and testing program.
Update Privacy program documentation, including policies, guides and playbooks.
Represent Foresters and participate in various industry groups and /or committees.