Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Manager of Compliance - Privacy role.

Rezi rewrites your resume against American Express's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Manager of Compliance - Privacy posting at American Express — free, in seconds.

About the Role

This role supports Amex Bank of Canada's privacy compliance and risk management program, providing Second Line of Defence (2LOD) oversight and challenge on privacy and data protection matters.

Responsibilities

Provide 2LOD oversight and challenge of potential privacy and data breach incidents affecting Amex Bank of Canada and Canadian customers, applicants, employees and other individuals, as applicable.
Review privacy incident assessments performed by 1LOD and other relevant stakeholders and independently assess the application of Canadian privacy requirements.
Assess potential breaches against applicable Canadian legal and regulatory notification requirements and provide recommendations to the LECO/Privacy Officer regarding whether notification to affected individuals, the OPC or other applicable Canadian authorities is required.
Support the LECO/Privacy Officer in documenting regulatory reporting and notification determinations, including the rationale supporting reportability and non-reportability decisions.
Provide oversight and challenge of 1LOD management of personal information access requests, including timeliness, completeness, exemptions, escalations and other compliance considerations.
Review complex or escalated privacy access matters and provide guidance and challenge to support compliance with applicable Canadian privacy requirements.
Review and support responses to escalated privacy complaints, including complaints made to or involving the OPC, and coordinate with Legal, GPO, IPRM and relevant business teams as appropriate.
Support the LECO/Privacy Officer in regulatory inquiries, investigations and other engagement with the OPC relating to privacy complaints or other privacy compliance matters.
Support the execution and oversight of Privacy Risk Assessments for Canadian initiatives, products, processes, technologies and changes, acting under the Bank's local Privacy Officer delegation model where applicable.
Partner with GPO and IPRM to apply enterprise privacy risk management frameworks within the Canadian regulatory context, while identifying and escalating Canadian-specific legal, regulatory or risk considerations.
Provide effective challenge where global privacy requirements, assessments or controls require augmentation to appropriately address Canadian legal entity requirements.
Identify emerging privacy risks, control gaps and recurring themes arising from breaches, access requests, complaints and Privacy Risk Assessments, and escalate material concerns to the LECO/Privacy Officer and other appropriate governance forums.
Support privacy risk reporting and governance for Canada, including development of metrics, trends and insights for senior management and applicable risk committees.
Support the assessment of Canadian privacy regulatory developments and their potential impact on the Bank's policies, standards, procedures, controls and business practices.
Partner closely with Legal, Operational Risk, Information Security, Technology, business teams, GPO, IPRM and other Compliance teams to support effective management of privacy risk.
Contribute to enhancements to the Bank's privacy compliance framework, including policies, procedures, governance, controls, training and monitoring.
Maintain appropriate records and evidence supporting 2LOD privacy oversight, challenge, regulatory assessments and key decisions.

Requirements

5-7 years of relevant experience in privacy compliance, privacy law, regulatory compliance, or privacy risk management, preferably within a Canadian financial institution or other highly regulated organization.
University degree in law, business, risk management, privacy, information management or a related discipline, or equivalent relevant professional experience.
Strong knowledge of Canadian privacy and data protection requirements, particularly PIPEDA, associated regulations and guidance issued by the Office of the Privacy Commissioner of Canada.
Demonstrated experience assessing privacy/data breaches, including application of regulatory breach notification and reporting requirements.
Experience with privacy access requests, privacy complaints, regulatory inquiries and/or privacy risk or impact assessments.
Strong analytical skills and regulatory judgement, including the ability to assess complex fact patterns against legal and regulatory requirements and develop clear, well-supported recommendations.
Excellent written and verbal communication skills, including the ability to communicate complex privacy matters clearly to senior leaders, business partners and risk stakeholders.
Strong stakeholder-management skills and demonstrated ability to work effectively across Legal, Compliance, Risk, Technology, Information Security and business teams.
Ability to manage multiple complex and potentially time-sensitive matters, including privacy incidents and regulatory deadlines.
Experience engaging with or responding to matters involving the Office of the Privacy Commissioner of Canada.
Experience conducting or reviewing Privacy Impact Assessments, Privacy Risk Assessments or similar privacy-by-design assessments.
Familiarity with enterprise privacy governance frameworks and working within global organizations where local regulatory requirements must be integrated with enterprise standards.
Employment eligibility to work with American Express is required as the company will not pursue visa sponsorship for these positions.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

Skills

CIPP/C, CIPP/E, CIPM or other recognized privacy certification considered a strong asset.

Location

Canada

Work Type

Hybrid
Onsite
Virtual

Experience Level

5-7 years

Education Level

University degree in law, business, risk management, privacy, information management or a related discipline, or equivalent relevant professional experience.
CIPP/C, CIPP/E, CIPM or other recognized privacy certification

Benefits

Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities

About the Company

At American Express, our culture is built on a 175-year history of innovation, shared values, and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues.
From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.
Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Equal Opportunity

American Express is committed to providing an inclusive and accessible work environment in which all people who apply for positions or who work for or on behalf of Amex are treated with dignity and respect and are provided with equal treatment with respect to employment, regardless of that person's age, sex, sexual orientation, gender identity, gender expression, race, colour, ancestry, ethnic or national origin, citizenship, religion or creed, marital status, family status, pregnancy, disability, record of offences, social condition or origin, political beliefs, association or activity or other factors prohibited under applicable Human Rights legislation (the “Prohibited Grounds”).
If you have a disability and need accommodation, please speak with the Recruiter for more information.