Senior Manager, HR Privacy Risk - UK, Europe & APAC - Human Resources

Royal Bank of Canada; Camden Town; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A major financial institution in Camden Town is seeking a Privacy Compliance Specialist. You will oversee compliance with data protection and privacy laws, handle employee rights requests, and manage HR data incidents. Ideal candidates will have a strong privacy background and technical knowledge of relevant regulations in the UK and APAC. This full-time role involves working at least four days in the office.

Benefits

Comprehensive total rewards programme

Competitive compensation

World-class training programme

Qualifications

• Experience applying data protection laws in practice.
• Ability to manage multiple high-priority projects simultaneously.
• Experience with process mapping and continuous improvement initiatives.

Responsibilities

• Support the maintenance of the Global Privacy Program for Human Resources.
• Handle individual rights requests in compliance with GDPR.
• Manage HR data incidents and breaches.

Skills

Strong privacy background

Technical knowledge of data protection laws

Analytical skills

Problem-solving skills

Attention to detail

Organizational skills

Self-sufficient

Education

CIPP/E or Practitioner Certification

Tools

MS Excel

MS Word

MS Access

MS Outlook

Job description

About the Role

You will be overseeing RBC's compliance with applicable data protection and privacy laws as well as RBC's Enterprise Privacy Risk Management Policy as it relates to HR/Employee data. This position is full time and will require you to work a minimum of 4 days in the office per week with the option to work one day from home.

Key Responsibilities

• Support the maintenance and enhancement of the Global Privacy Program for Human Resources in UK, Europe and APAC, helping ensure compliance with applicable privacy laws, regulations and internal policies.
• Responsible for the handling of all individual (employee) rights requests in compliance with GDPR and/or other applicable data privacy laws and regulations, including review and redaction of relevant material in collaboration with key internal partners.
• Be responsible for privacy & compliance regulatory requirements in the UK, Europe and APAC, leveraging knowledge to monitor, review, report, fulfill and service privacy incidents, privacy‑related requests, and other privacy risk‑management activities applicable to HR/Employee data. This includes advising on privacy‑by‑design requirements, conducting privacy risk assessments, identifying and mitigating HR privacy risk exposures, managing data incidents and breaches, and coordinating responses to individual rights requests and other privacy queries.
• Ensure appropriate handling of UK, Europe and APAC‑based privacy complaints, responding to privacy queries and complaints from employees in a timely and accurate manner.
• Identify, document and track privacy risks and recommend actions (control activities), reporting the risk position as required through formal organisational risk‑management processes and investigations.
• Initiate and own risk‑mitigation methodologies required to prudently manage risk exposures applicable to HR/Employee data. Develop service partnerships with business stakeholders, Group Risk Management and Compliance in identifying risk‑related issues and raising awareness and understanding of risks associated with HR/Employee data.
• Support and advise on the management of HR/Employee data incidents and breaches in line with privacy legislation and local (UK/EUR/APAC) specific policies and procedures.
• Support the privacy‑risk program for Human Resources by developing and facilitating privacy training to improve employee awareness.
• Drive a culture of privacy within Human Resources by advocating for privacy‑by‑design and the integration of RBC privacy principles, accountability, and sharing of best practice.

Qualifications

• Strong privacy background.
• Technical knowledge of data protection laws, regulations and practices in the UK, Europe (UK/GDPR and GDPR) and APAC and experience applying these in practice.
• Strong analytical (qualitative and quantitative) and problem‑solving skills with a focus on attention to detail.
• Strong administrative, documentation, planning and organisational skills. Proven ability to manage multiple high‑priority DSAR projects simultaneously.
• Self‑sufficient with the ability to work independently and in a team environment.
• Experience with process mapping, documentation, and continuous improvement initiatives.
• Aptitude for learning technical systems and applications (MS products – Excel, Word, Access, Outlook, etc.).

Nice to Have

• Technical knowledge of data protection laws, regulations and practices in APAC and experience applying these in practice.
• Relevant privacy experience in financial services, delivering cross‑company and/or jurisdiction privacy programmes/initiatives.
• Progressional designation/privacy qualification (e.g., CIPP/E or Practitioner Certification) highly desirable.
• Experience delivering cross‑company and/or jurisdiction privacy programmes/initiatives.

Benefits

• A comprehensive total rewards programme including bonuses, flexible benefits and competitive compensation.
• Leaders who support your development through coaching and management opportunities.
• Opportunities to work with the best in the field.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high‑performing team.
• A world‑class training programme in financial services.

At RBC, we believe an inclusive workplace that embraces diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where employees feel supported to perform at their best, collaborate effectively, drive innovation, and grow professionally helps bring our purpose to life and create value for our clients and communities.