Responsibilities:   

Enterprise Privacy Program Alignment & Execution 

• Primary responsibility for execution and alignment of RSM’s enterprise privacy program within the Firm’s operations. Participates in the strategic evolution and implementation of the Enterprise Privacy Program and ensures quantifiable risk parameters are included within policies and procedures. 

• Supports enforcement of Enterprise Privacy Program by collaborating with the Chief Privacy Officer (“CPO”) and DCPO to develop and maintain metrics for internal reporting. 

• Serves as a strategic business advisor and partner to our Firm, developing close relationships and a deep understanding of the needs of our clients, business, and talent at all levels of our Firm. 

• Creates specific trainings, policies and standards, guidance documents and practice aids, and tailors enterprise privacy program materials to meet the needs of our clients, talent, and other stakeholders. 

• Provides pragmatic, business-minded advice on new product and service developments to expedite speed to market, accelerate digital velocity, and enhance digital experiences.  Serves as the primary point of contact within the Privacy Office for routine matters involving privacy obligations. 

• Monitors and evaluates new and existing Canadian, U.S., and global privacy laws and obligations, as well as industry best practices, and serves as a trusted business advisor to RSM.  Participates on the execution of strategic priorities relative to new and existing privacy laws and obligations. 

• Collaborates with internal stakeholders to foster a culture of privacy awareness and compliance.  Supports and champions the Privacy by Design program.  

• Primary responsibility for operationalizing lawful cross-border data transfers of data, including assessment of legal bases and instruments for such transfers and related certifications. 

• Provides support on internal investigations into potential violations or non-conformities with applicable privacy laws, standards, and policies and recommends remediations. 

• Champions and supports governance, compliance, and risk management programs in adjacent areas. 

• Assists with maintenance and implementation of privacy governance, risk and compliance programs, and privacy-enhancing technologies. 

• Supports other aspects of the enterprise privacy program as needed. 

Administrative Duties 

• Develops reports and dashboards for key performance indicators 

Incident Response 

• Address potential privacy incident response(s) for routine matters involving personal data, including establishing reasonable measures to prevent recurrence. 

Required Qualifications: 

• Bachelor’s degree 

• Juris Doctorate or equivalent 

• Active license in good standing to practice law 

• Demonstratable knowledge of domestic and global data privacy laws and regulations 

• 7+ years of relatable experience  

• Strong managerial skills 

Preferred Qualifications: 

• CIPP/C, CIPM, CIPT, or similar privacy certifications  

• Minimum 7 years as a practicing attorney 

• Experience with building a global privacy program 

• Experience with OneTrust or other privacy related software 

• Experience with domestic and international privacy incident response