Senior Analyst, Privacy & Compliance

Key Responsibilities

• Work with the AVP, Privacy & Compliance, the team, and business units to operate an effective privacy program in compliance with applicable laws and consistent with the organization’s compliance risk tolerance and that supports Foresters success. This may include but is not limited to the following:
• Investigate and respond to privacy-related issues, breaches, or incidents, including identifying relevant facts, any control deficiencies or failures, and ensuring prompt remediation including the preparation of any required regulatory or individual notices
• Conduct privacy impact assessments by working effectively with impacted business units to comply with applicable laws and produce meaningful business and compliance outcomes
• Support business and membership initiatives, including leading the assessment of privacy risks and development of practical and effective privacy risk mitigants
• Provide privacy support to cybersecurity incident management, such as timely preparation of regulatory reporting, individual notices and tracking of incident response steps relative to reporting obligations
• Provide privacy support to the AI governance program, including the identification and evaluation of privacy risks relative to proposed AI implementations
• Ensure the execution of corrective action plans for identified privacy compliance issues
• Actively monitor and assess applicable regulatory developments, trends, and best practices
• Support a culture of privacy compliance by being a privacy advocate who can effectively communicate the benefits of sound privacy practices to stakeholders
• Liaise with third parties to support their effective privacy practices relative to Foresters
• Execute vendor privacy due diligence reviews through the Foresters third-party risk management framework.
• Work with Foresters UK business as required to support enterprise-wide privacy work or individual initiatives
• Respond to data subject requests
• Support the operation of a regulatory compliance monitoring and testing program
• Update Privacy program documentation, including policies, guides and playbooks
• Represent Foresters and participate in various industry groups and /or committees
• Key Qualifications
• Minimum of 7+ years of directly related work experience in privacy compliance, ideally at a Canadian or US financial institution
• Understanding of privacy compliance risk management impacting Canadian and US financial services organizations, ideally including life insurance
• Sound professional judgment to identify and escalate issues, assess risks and controls, and develop recommendations
• Strong critical thinking and analytical skills with a focus on pragmatic problem solving
• Experience distilling complex legal concepts into effective operational solutions
• Experience in vendor privacy due diligence is an asset
• Collaboration and communications skills (oral, written, presentation), ability to build relationships, engage and influence others
• Post-secondary degree (or equivalent work experience)
• Bilingual proficiency in English and French is desirable
• Professional privacy certifications or designations (e.g. CIPP or equivalent) is an asset
• #LI-Hybrid
• Salary Range:
• The actual base salary for this position will depend on several factors, including job-related skills, experience, and education. In addition to base pay, eligible employees may participate in a discretionary variable incentive plan, results are subject to both individual and company performance.
• Please note that this posting is intended to fill an existing vacancy; however, there may be instances where more than one vacancy is available for the same role.

Key Qualifications