Analyst, Europe and Asia-Pacific Privacy Office

Analyst, Europe and Asia-Pacific Privacy Office

Pay Details:

Work Location: London, United Kingdom

Hours: 35

Line Of Business: Compliance

Pay Details: We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

The EAP PO Privacy is part of the Global Compliance department and has a mandate for promoting a culture of privacy compliance and oversees TD’s privacy practices and initiatives regarding customer and employee information.

The EAP PO has oversight of privacy risk in Europe and Asia-Pacific. It provides specialized advice and counsel to Risk Owners (businesses and corporate functions), reports and escalates privacy issues of key importance within TD, provides training and acts as a primary point of contact for local privacy regulators.

As second line of defense Oversight Function, the EAP PO along with other risk and oversight partners provide objective guidance, independent challenge and risk‑based oversight of TD's compliance with Europe and Asia-Pacific privacy laws, rules and regulations.

This role reports to the EAP PO Privacy Manager and supports various activities within Privacy.

• Perform reviews of Privacy Impact Assessments, Legitimate Interest Assessments, Transfer Impact Assessments, Third Party Control Assessments and work with businesses to review and challenge control and mitigation measures.
• Manage data privacy breaches and incidents and assist with data subject rights requests.
• Manage annual review of Records of Processing Activities and the associated Annual Attestation process, including for purposes of Article 30 of the GDPR.
• Maintain privacy issues log and other tracking and record‑keeping documentation for the EAP Region.
• Maintain privacy‑related risk assessments, metrics and reporting mechanisms to assess the health of the privacy program.
• Remain current on applicable legislation and regulation across the region.
• Support regulatory change activities.
• Assist in maintaining internal privacy policies and notices.
• Support training and awareness program to promote compliance.
• Conduct and/or participate in regional monitoring and testing activities as required.
• Escalate issues as appropriate.
• Support special projects and strategic initiatives as assigned.
• Provide objective guidance, support and advice to promote strong privacy controls and processes.
• Assist with privacy‑related activities associated with corporate transactions such as integration, mergers and acquisition activities, including planning, due diligence, privacy impact assessments, policy and procedure reviews and creation.
• Participate fully as a member of the EAP Privacy team and Global Privacy Compliance team through collaboration, sharing of privacy knowledge and expertise and identify ways to innovate our processes.
• Maintain personal/professional development to meet the changing demands of the role, including all relevant regulatory and legislative training.

• Experience in one or more of the following disciplines would be beneficial:
  Privacy and Data Protection, Compliance, Legal, Risk Management, Internal Audit, Information Technology.
• Ability to independently manage timelines and deliverables and provide subject matter expertise to business partners and projects.
• Excellent communication skills, both oral and in writing, with the ability to work across different jurisdictions and with stakeholders across different areas.
• Analytical and enquiring nature, ability to identify potential risks, ability to solve problems, attention to details.
• Ability to build business relationships with a capacity to influence and convince.
• Proficient in Microsoft Office Applications, including Excel, Word and PowerPoint.

• Bachelor’s degree in Law, Cybersecurity, Information Technology, Business Administration, or a related discipline.
• An International Association of Privacy Professional (IAPP) certification or other comparable…