Privacy Risk Manager (Hybrid)

at  Morgan Stanley

Privacy Risk Manager (Hybrid)
Job Number:

3257144
POSTING DATE: Aug 15, 2024
PRIMARY LOCATION: Americas-Canada-Quebec-Montreal
JOB: Other
EMPLOYMENT TYPE: Full Time
JOB LEVEL: Director

DESCRIPTION

We offer:

• To work with some of the best professionals in the business - for a firm that values individual intellect as much as teamwork
• State-of-the-art offices that are designed to maximize collaboration
• Flexible working arrangements and a hybrid work environment
• Competitive compensation and benefits package
• Enriching challenges that provide opportunity for constant learning and advancement
• An environment which is leveraging technology to its highest potential
• Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential.

Team Profile:
The Privacy Operations team focuses on mitigating risk and operating processes that support the firm’s legal, regulatory, and contractual obligations in relation to global data protection and privacy matters. While Privacy Operations is central to the successful operation of the compliance framework, the team operates in collaboration with Legal, Compliance, Risk, Technology, and first line Business Units.
This is an exciting opportunity join a newly established team in Montreal. With this has come multiple opportunities for Privacy professionals.
Position Description:

The Privacy Risk Manager will be primarily focused on conducting privacy risk assessments and assisting with complex individual rights requests. Specifically, the Privacy Risk Manager will be responsible for:

• Working with business unit stakeholders to accurately document the personal information processing activities, including the purpose and necessity of such processing.
• Working with business unit and privacy risk/compliance stakeholders to conduct privacy impact assessments and/or data transfer assessments, where required.
• Working with stakeholders in HR and Legal and Compliance to assist with the completion of complex individual rights requests, including reviewing potentially relevant documents and redactions to ensure personal data is accurately identified and disclosed.
• Supporting the production of metrics and reports.
• Partnering with the data protection officers, cyber and privacy legal, privacy compliance, information management, operational risk and the firmwide data office on initiatives impacting the privacy risk assessment program.
• Fostering continuous improvement of Privacy Operations services.

QUALIFICATIONS

Required Skills:

• 7+ years in data protection and privacy experience
• Experience managing a team
• Familiarity with global data protection and privacy regulations including GDPR, CPRA, Quebec’s Law 25, etc.
• Excellent written and verbal communication skills
• Ability to manage competing priorities in a fast-paced environment
• Experience conducting privacy impact assessments
• Experience working with technology teams

Desirable Skills:

• Financial services industry experience strongly preferred
• Understanding of privacy risks associated with AI/ML and cloud technologies
• Familiarity with privacy enhancing technologies
• Experience with privacy tools and data analysis
• IAPP certifications a plus

About Us:
Morgan Stanley is a global financial services firm and a market leader in investment banking, securities, investment management and wealth management services.
With several thousands of technologists working in Montreal, Morgan Stanley’s Technology Centre is a key contributor to the Firm’s leading technology platforms, including low latency and electronic trading, cloud engineering, cyber security, Al/ machine learning, and end user technologies.
Morgan Stanley was named one of Montreal’s Top Employers and one of Canada’s Top Employers for Young People in 2022.
All our positions are located in Montreal, Quebec. We offer a hybrid work environment, combining remote work and attendance in the office.
Knowledge of French and English is required

• Working with business unit stakeholders to accurately document the personal information processing activities, including the purpose and necessity of such processing.
• Working with business unit and privacy risk/compliance stakeholders to conduct privacy impact assessments and/or data transfer assessments, where required.
• Working with stakeholders in HR and Legal and Compliance to assist with the completion of complex individual rights requests, including reviewing potentially relevant documents and redactions to ensure personal data is accurately identified and disclosed.
• Supporting the production of metrics and reports.
• Partnering with the data protection officers, cyber and privacy legal, privacy compliance, information management, operational risk and the firmwide data office on initiatives impacting the privacy risk assessment program.
• Fostering continuous improvement of Privacy Operations services