Own end-to-end data compliance program for Canadian lending business, implement PIPEDA, OSFI, FINTRAC (AML/KYC) and provincial privacy regulations.
Develop and maintain data compliance policies, procedures, standards and SOPs covering full lifecycle: collection, usage, storage, sharing, cross-border transfer, retention & destruction.
Lead compliance assessment, data mapping, risk identification and remediation for customer data, credit data, risk engine data and credit reporting workflows.
Manage data security & privacy protection, drive data breach response, regulatory reporting, customer notification and incident resolution.
Liaise with OPC, OSFI, FINTRAC for inquiries, examinations and audits; prepare compliance documentation and reports.
Deliver compliance training, awareness and assessment to build compliance culture and accountability.
Partner with tech, product, risk and operations...