Financial Crime Risk Management Specialist - Regulatory Management

About This Role

This specialist role provides subject matter expertise and hands-on support for privacy designate activities within the Financial Crime Risk Management (FCRM) department. The position involves acting as a privacy subject matter expert, maintaining stakeholder relationships, and fostering a privacy-aware culture within FCRM.

Responsibilities

• Manage and identify privacy risk in day-to-day activities and influence a culture of privacy compliance
• Provide privacy-related subject matter knowledge applicable to the Risk Owner's products, services, and initiatives
• Identify, understand, and assess privacy risk associated with business products, services, initiatives, data usage activities, models, tools and operations
• Understand impacts of new/amended privacy legislation, regulation, and applicable privacy regulators' expectations
• Support Risk Owners with the establishment, implementation and maintenance of privacy procedures and controls, as appropriate and in line with TD's risk appetite
• Support Risk Owners as they mitigate and manage privacy risks applicable to their business activities and/or operations, leveraging where possible existing governance, processes and controls
• Support the Risk Owner with Regulatory Compliance Management (RCM) Program activities relating to privacy Laws, Rules and Regulations (LRRs), e.g., inherent risk rating, control mapping, etc., and escalate to the Privacy Office any RCM impacts/triggers that may warrant updated RCM activities for the Risk Owner
• Promote the privacy mandate through the implementation/maintenance of and compliance with privacy related policies, standards, procedures and guidelines, while collaborating with business and jurisdictional stakeholders, including but not limited to:
• Review, challenge, and approval of Privacy Impact Assessments (PIA)
• Support end-to-end activities and reporting related to identified issues, events, and, where applicable, individuals' rights and information access requests and privacy related complaints and events
• Work collaboratively with other PDs when Risk Owner's activities overlap across multiple Risk Owners and jurisdictions
• Participate in activities that support the oversight and inform the effectiveness of the PD program
• Act like an owner in understanding and proactively supporting privacy compliance within their Risk Owner's strategic priorities

Requirements

• 7+ years of experience in a governance/oversight role, compliance, audit, or related fields
• Familiarity with privacy concepts and principles with a desire to learn more about privacy
• Knowledge of the organization and FCRM function
• Problem solving and analytical skills to assess privacy risks, identify issues and opportunities, and implement action