Data Protection Specialist

Job Description

Please note:
- Current work authorization for Canada is required for all openings- You will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement.

Who We Are

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

Business Overview

The mandate of the Data Protection Office (DPO) in Fidelity Canada is to establish a proactive and collaborative framework that ensures Personal Data of Fidelity Canada's customers, employees and all other individuals is identified and adequately protected.

How You’ll Make an Impact

As the member of the DPO team, the Data Protection Specialist provides an excellent service in supporting Fidelity Canada’s data protection & data privacy culture through proactive management of data privacy risks and continuous focus on understanding and improving our data protection controls.
- Oversight of data protection controls within Fidelity Canada_- Collaborate with functional owners to review use of personal data in Fidelity systems and business processes, assess data protection controls, identify required enhancements, and monitor their implementation- Maintain well documented inventory of data privacy reviews and findings- Support timely execution of DPO initiatives, and implementation of new and enhanced data protection controls- Maintain DPO quarterly scorecards and prepare presentations on progress of DPO initiatives and company wide data privacy enhancements- Conduct formal DPO review and attestation processes on existing controls
- Conduct Privacy Impact Assessment for Fidelity Canada projects, systems and business process enhancements_- Maintain Privacy Impact Assessment (PIA) questionnaire, keeping it up to date with data protection controls and data privacy requirements, regulatory and technology changes- Perform PIA assessments for new projects, systems, or business process enhancements, including onboarding of third-party service providers with access to personal data of Fidelity customers or employees- Document and prioritize findings, outlining current state of data protection controls, required enhancements, and accountability for their implementation- Track all agreed-upon changes in DPO inventory, monitoring progress against target implementation timelines, and supporting accountable business/technology owners as needed
- Promote adherence to data privacy regulatory requirements, information security and technology standards and ethical use of customer data_- Support organizational awareness of data privacy requirements, through company-wide communication and training- Closely collaborate with technology teams to ensure continuous alignment with Fidelity Canada Information Security, Infrastructure, Data Governance, Architecture and Development standards and best practices- Partner with Risk, Compliance and Legal teams to ensure adherence of PIA and data protection controls to Canadian regulatory requirements, Fidelity Canada Privacy and Ethical Use of Customer Data policies
- Participate in resolution of personal data privacy breaches_- Collaborate with the Fidelity Canada Chief Privacy Officer and their team in the analysis and remediation process handling personal data privacy breaches- Include any remediation action items in the overall inventory of Fidelity Canada data protection controls and related enhancements

What We Are Looking For- Post-secondary education in the areas of IT, Business or related field are preferred- A minimum of 2 years of work experience in the data privacy field in:
- Business role - working with business controls related to collection and handling of customers’ personal data, or- Technology role - including analysis, development, testing on data related initiatives, work in data / security architecture, data governance, or information security roles.- Completion of Data Privacy training and/or certification (e.g., Certified Information Privacy Professional, Certified Information Systems Security Professional, Certified Data Privacy Solutions Engineer, Certified Information Privacy Manager, Certified Information Systems Auditor, etc.) is considered an asset- Strong interest in data privacy and data protection- Experience and demonstrated ability to manage multiple project assignments, with stro