Privacy Lead, Incident Response
Position Summary...
Incident Response Lead drives the investigation, assessment, reporting and remediation of incidents involving personal information of WM patients, customers and associates under the federal and provincial private sector laws as well as those governing health privacy. This position reports to Privacy Officer.What you'll do...
Oversee the entire process of incident identification, containment, investigation, analysis and recovery, working closely with local and global business partners, investigators and legal to drive the process and ensure timely conclusion of cases, proper and timely notice and regulatory reporting, and reasonable remediation of the identified gaps.
Identify program compliance gaps, priorities, dependencies, and redundancies; develop and/or maintain the Incident Response Plan, relevant standards and controls, general and customized training and awareness content; implement process remediations and simplifications, drive automation of routine tasks and program KPI and KRI tracking.
Direct other breach response activities as required, including assisting with management of service providers, and crisis management assistance.
Develop, monitor, and report on the in-market program KPIs and KRIs.
Facilitate the decision-making and problem-solving processes, document and track the incident details, actions, and outcomes within the dedicated platform, and conduct the post-incident review.
Qualifications
- Proficiency in managing data privacy and information security incident containment and remediation, and breach-related notification and reportingwithin a medium to large organization
- Familiarity with one or more industry frameworks / standards (e.g., NIST CSF, ISO 27001) and cybersecurity and data privacy laws/regulations (e.g. PIPEDA, PIPA, Law 25, GDPR, CASL, PHIPA)
- Demonstrates ability to articulate privacy and security issues, analysis and remediation steps to business stakeholders and effective presentation, process understanding and gap analysis
- Proven ability to effectively influence a multi-faceted workforce during situations with senior leader visibility, prioritize multiple tasks, details and activities in a time sensitive and high-pressure environment, judgment in making and owning process decisions while being sensitive to organizational needs
- Experience in managing the change process and conducting ad-hoc meetings as required
- Strong documentation skills, including in the creation and maintenance of process documents and incident response records
- Proven experience in compliance, governance and/or accountability management
- Willingness to be on-call and work after hours as needed
- University degree in law, IT service management, or a related field
- Familiarity with OneTrust and other incident monitoring and reporting tools, CIPP/C and/or CIPM certification.
- Proficiency in French a plus
Minimum Qualifications...
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Preferred Qualifications...
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Walmart will accommodate the disability-related needs of applicants and associates as required by law.
Primary Location…
1940 ARGENTIA RD, MISSISSAUGA, ON L5N 1P9, Canada