Privacy, Lead

At Interac, we design and deliver products and solutions that give Canadians control over their money so they can get more out of life. But that’s not all. Whether we’re leading real-time money movement, driving innovative commerce solutions like open payments for transit systems, or making advancements in new areas like verification and open banking, we are playing a key role in shaping the future of the digital economy in Canada.

The Privacy, Lead is responsible for running the Interac Privacy Office on the day-to-day basis. This includes contributing to the Privacy Program strategy, operationalizing privacy requirements, and maturing privacy across the organization and providing BAU support to the business. You will also proactively identify and solve problems, anticipate, and influence internal/external business and/or industry issues that may impact the management, organizational function, or direction of the business.

Ideally, you are a seasoned, critically thinking, execution minded, senior privacy professional, a key addition to the Privacy Office and will be a valued strategic business partner for the business. You will have the experience of delivering in a fast-paced environment comprising of complex internal business unit and external stakeholder relationships.

**You'll be responsible for**:

- Operationalizing execution/implementation of the Interac Privacy Management Program, including identifying (i) program action items (ii) impacted business units (iii) priority roadmap (iv) timelines (v)reporting and (vi) privacy controls for audit. Ongoing engagement with business units, key internal stakeholders, vendors, FI stakeholders and other members of Interac ecosystem (e.g., Interac Verified stakeholders) required.
- Leading cross functional privacy forum (stand alone or incorporated into existing forums like Data Governance or ISMS Governance) with accountable business unit privacy representatives to operationalize Privacy Target Operating Model and to align business strategy and privacy requirements impacting Interac business units.
- Engaging with Vendor Management Office to operationalize vendor privacy impact assessment including continuous improvement of PIA process, response to BU questions/challenges, review of PIA, draft of PIA report and development of privacy remediation/response roadmap (including meeting with BU, Security, Legal and other stakeholders to ensure privacy controls are put in place prior to Vendor contractual engagement).
- Engaging with business units to operationalize privacy impact assessment of new/existing services/products to ensure privacy by design - including continuous improvement of PIA process, response to BU questions/challenges, review of PIA, draft of PIA report and development of privacy remediation/response roadmap (including meeting with internal stakeholders to ensure privacy controls are put in place (e.g., in development phase and/or prior to launch).
- Developing reports on privacy metrics, important topics and trends for senior leadership and as required for reporting.
- Supporting regulator investigations and examinations including those performed by internal third line auditors, external auditors and Privacy Regulators. Draft audit responses and discussions, and present arguments to influence findings to Enterprise Privacy Lead.
- Remaining current with changes to the Privacy Act, PIPEDA, CASL, provincial legislation and guidance released by the OPC. Conduct ongoing research on regulator decisions, industry trends, and current events related to privacy compliance and best practices. Draft communications for enterprise articulating key updates on a quarterly basis.
- Developing and maintain privacy program policies, standards, processes and procedures, providing guidance and influencing the business areas to incorporate privacy into their processes and documentation.
- Assisting in the conduct of data privacy event investigations and ensure appropriate action as required by PIPEDA and provincial regulators.
- Managing and respond to Data Subject complaints from individuals and employees, including updates to Data Subject Standard to align with applicable privacy law modernization and process efficiencies.
- Supporting develop and implement mandatory specialized Canada privacy training and ongoing awareness.

**You bring**:

- A bachelor’s degree
- Senior Privacy Professional at complex organization (FI, payments company, technology, fintech)
- IAPP Certified Information Privacy Professional Canada certification (example: CIPP/c, CIPM)
- Developed or assisted in the development of privacy roadmap to reach full compliance with all applicable data privacy laws and regulations
- Implemented processes for maintaining compliance with continuous changes in the privacy regulatory landscape.
- Worked directly with business units to provide practical advice and guidance to the organization to enable strategic goals
- Regulatory experience - clear underst