Description of position

The Data Privacy Analyst supports Costco’s Canadian efforts to protect member information in a fashion that strengthens the trust our members have in Costco, protects Costco’s brand, enhances member experience, and is compliant with applicable privacy regulations. A successful candidate will be one who has subject matter expertise in the area of consumer privacy. The position requires a leader who can collaborate with Warehouse Operations, other business units, Legal, IT and Information Security teams to provide effective communication and practical guidance for achieving regulatory compliance. The role requires providing privacy-related communication and strategy on a variety of privacy issues including new business initiatives, maintaining a register of process activities and data flows, assistance with the investigation and management of potential data breaches, conducting Privacy Impact Assessments, researching emerging privacy laws and trends, developing and delivering training, vendor due diligence and oversight of processes to respond to privacy requests. This position is ideal for an individual who has already developed privacy subject matter knowledge in a leadership role. A project management background or relevant experience will help drive success in this role.

Daily tasks and responsibilities

Drives and facilitates processes designed to assess, manage and mitigate privacy risks.
Design and implement strategies and frameworks to ensure compliance around the collection, minimization, use, storage, accuracy and disposal of customer, employee and other personal information processed by Costco.
Envisions, drives and supports the development and implementation of Costco Canada’s privacy program.
Supports the operationalization and continuous improvement of Costco's privacy program management and compliance framework, policies, procedures, and governance model.
Supports the processing of privacy requests, including monitoring program ticket status and aging, reviews data subject access reports, handles escalations, responds to consumer questions and concerns.
Works with processes and monitors and manages requirements related to ongoing privacy operations obligations.
Helps maintain effective privacy engagement, controls, and compliance across the organization through partnership with other teams including Warehouse Operations, Marketing, Membership, Customer Service, E-Commerce.
Collaborates with members of Costco US Privacy Operations, Costco US IS Privacy, InfoSec and Legal teams to achieve shared goals and objectives.
Participates in the gathering, analysis and reporting of data from existing systems by completing and maintaining data inventories.
Conducts Privacy Impact Assessments (PIA) and compliance activities, as needed, in conformity with applicable data protection frameworks, policies and procedures.
Participates in projects involving new privacy legislation and regulations.
Coordinates privacy program objectives and/or awareness across Costco regional and home office operations.
Assists in the collection and preparation of privacy program metrics and regular status reports.
Stays abreast of current and evolving data privacy and compliance legislation and regulations and works proactively to promote awareness, meet compliance objectives, propose solutions to process deficiencies, and communicate privacy program objectives effectively at all levels.
Assists in establishing and following frameworks for general privacy controls, and identifies and prioritizes operational risks.
Drives assigned tasks, leveraging relevant experience, or outside resources where needed.
Communicates and makes presentations/recommendations, as required, to management and other stakeholders.
Builds and maintains strong relationships with business partners, coworkers, and all levels of management.
Identifies privacy trends or areas of concern and offers solutions for better controls, efficiencies, and process improvements.

Non-essential functions and tasks

Assists in other areas of the department as necessary.
Assists in other areas of the company as necessary.

Typical schedule

May be required to work evenings and weekends based on the needs of the business.

* Typical shifts and days off will be discussed at the time of the interview but could change as per the needs of the business. .

Qualifications (Costco-specific or industry-specific skills that candidates must possess)

· Education/Training:

High School Diploma or GED preferred.

College or University degree preferred.

· Permits/Licenses/Certifications:

Certified Information Privacy Professional - Canada (CIPP/C), Certified Information Privacy Manager (CIPM), or equivalent professional certification, is preferred

· Experience:

5 years or more experience in the data privacy field, is required

2 – 5 years or more of leadership experience in privacy and/or compliance related risk management and related privacy disciplines (e.g. privacy program and policy, privacy law, information governance, incident response, information security training and awareness), is preferred.

Experience working in an agile environment comprised of varying levels of compliance maturity, is preferred.

Knowledge/Skills:

Working knowledge Canadian privacy legislation, is required

Excellent analytical, project management, interpersonal, and communications skills (written and oral), is required

Fluent in both written and spoken French and English, is required

Ability to prioritize workflow in order to meet deadlines, is required

Flexibility to change daily routine quickly, as business and compliance needs may change.

Ability to work under pressure with a high degree of efficiency, is required

A working knowledge of how to establish and build a privacy compliance program including how to achieve business alignment, and how to communicate effectively with multiple stakeholders, is required

Ability to interpret relevant regulations and understand how to adapt to regulatory change, is required

Ability with computer, phone, printer, copier, and scanner, is required

A knowledge of privacy frameworks and how to organize privacy policies and program activities (education, monitoring, data inventories, etc.), is preferred.

A general understanding of regulatory requirements related to privacy, including but not limited to the Canadian Anti-Spam Legislation, GDPR and CCPA, is preferred.

Understanding of compliance control procedures and experience working with or on a team focused on compliance, is preferred.

Advanced knowledge of the Google suite of office software products and MS Word, is preferred.

This is for an in person position at our Ottawa office

Costco Wholesale Canada

New Jobs

Personal Information and Privacy Specialist