Robin W. Email & Phone Number

Ottawa, On, Ca

Ottawa, Ontario, Canada

I actively contribute and lead the overall success of the Privacy Program by ensuring accountabilities are conducted in compliance with applicable regulatory requirements, internal policies and procedures and privacy by design principles. I apply privacy risk and control concepts to scenarios encountered and identify any potential issues and ensure they are addressed in a timely and effective manner. My duties include: • Reviews and applies applicable privacy legislation and amendments within the organization (PIPEDA, Bill 64, Bill C27, PIPA, CASL etc.).• Currently developing and implementing privacy management framework and tools to manage compliance.• Conduct investigations and recording/reporting of privacy breaches.• Support all internal business lines with Privacy Impact Assessments (PIAs) and access requests; provide subject matter expertise to stakeholders on initial questions and use cases by taking a privacy by design mentality; track and monitor progress of PIAs and open findings/recommendations associated to those.• Central point of contact for all privacy related inquiries.• Continuously developing and maintaining policies, processes, and training.• Some examples are assisting in the development of various internal privacy policies, implementing monthly and annual training materials, and updating existing privacy procedures.• Conduct systematic audits and provide recommendations to improve privacy practices or correct areas of non-compliance.• Develop and present reports to executives on privacy incidents and statistics.• Work with regulatory bodies such as the Office of the Privacy Commissioner of Canada (and applicable provincial equivalents).• Continuously monitor the industry landscape to identify trends and implement best practices (attend relevant conferences, webinars, newsletter subscriptions).

Ottawa, Ontario, Canada

- Advise business teams and stakeholders on key elements of implementing effective privacy practices as it pertains to data analytics and data governance- Conduct privacy assessments, identifying risks and recommending mitigations- Investigate and respond to privacy complaints, incidents, and breaches ensuring regulatory requirements are met- Ensure accurate and thorough responses are provided to privacy related inquiries, complaints and access to personal information - Maintain and enhance privacy program via review and implementation of policies, processes, guidelines, education and awareness initiatives and audit activities- Maintain and report on metrics to support trend analysis and provide recommendations for continuous improvement

As a Privacy Analyst I am responsible for supporting, developing and implementing privacy activities within the organization. • Manage the process for receiving, documenting, tracking, investigating, and acting on privacy incidents or breaches concerning the organization’s privacy policies and procedures • Conduct privacy audits and/or investigations, as assigned, including root cause analysis exercises. • Support privacy risk assessments and audits to support monitoring activities• Maintain and report on metrics to support trend analysis• Develop and implement GRC/Archer to centralize risk, support or lead key projects and implement mechanisms to identify, track, escalate and communicate project risks• Support the privacy training program to promote understanding, awareness and collaboration across the business

Provide coordination support to the Compliance, Legal and Governance (CLG) department. Work with departmental representatives to coordinate and lead deployment activities of various initiatives, and monitor progress and close existing initiatives. In addition, I provide administrative support, particularly on CLG business as usual programs such as audit monitoring.• Assist in initiating, planning, executing, monitoring and closing of projects or programs including the development of detailed project schedules and reports, monitoring status, evaluating risks/issues.• Assist in researching, monitoring and reconciliation of privacy investigations and audits.• Provide leadership to cross functional project teams in setting and meeting deadlines, creating and driving to detailed plan/deliverables, mitigating risk and removing roadblocks.• Develop internal communications for projects and initiatives. Manage smaller projects as part of day to day duties.

Responsible for providing business research and analysis support in the areas of operational performance, risk, and process management. Operational Risk Management• Conduct and/or facilitate risk assessments, understand risk data, and develop and monitor key Operational Risk Indicators• Develop robust and practical corrective action plans to improve the quality and effectiveness of controls and the control environment.• Develop and implement regular reviews and the testing of key controls.• Analyze, enhance, and build operational processes to enhance performance and reduce operational risk• Compile the Risk Reports and dashboards for the Operational and Senior Leadership Team• Maintain a risk management information system to catalogue risks, monitor progress, and report on the effectiveness of management’s mitigation efforts;• Actively assist business units and management with the development and assessment of their internal controls and risk management environment.• Develop and maintain policies and procedures • Prepare the affected business areas for the transition of new ways of working• Establish and maintain operational process maps

- Manage the development of action plans, remediation and validation of issues ensuring positive customer experience and business risk appetite- Partner with Line of Business to ensure escalation of issues including privacy related issues and audit findings- Demonstrate governance, control and risk management behaviors aligned with TD policies and practices- Support Line of Business to perform Control Assessments- Deliver Assessment results and recommendations for process change and risk mitigation to Senior Management and above, and influence decision makers to initiate change- Host and Manage the Business Control Forum Socialization Meetings and Action Plans-Member of the Employee Engagement Committee

-Review and analyzed fraudulent applications to detect fraud- Determined fraudulent trends to aid in development of strategies to prevent fraud-Demonstrated ability to think outside the box and manage multiple tasks while providing quality work-Used persuasion skills to extract vital information for fraud investigations-Review of applications for AML purposes