Role Description
Our client, a large global retailer, is building out a new Records of Processing Activities (ROPA) program to support its Canadian operations, largely from the ground up. In this role, you'll partner directly with the client's privacy engineering team and work across a wide range of business units to document how each line of business handles data, translating existing global ROPA structures into accurate, Canada-specific entries.
If you have hands-on ROPA-building experience, are comfortable owning stakeholder relationships independently, and know how to stay organized across a large, multi-threaded workload, we want to speak with you.
-
Build out a Canadian ROPA program largely from the ground up, partnering directly with the client's privacy engineering team.
-
Lead discovery and requirements-gathering sessions with business stakeholders across approximately 10-12 business units, documenting each unit's systems, processes, and data handling practices.
-
Draft and maintain ROPA entries using established templates, adapting existing global ROPA structures to reflect Canada-specific business processes.
-
Proactively track and follow up on outstanding items across 24+ stakeholders, maintaining clear visibility into what's needed, from whom, and by when.
-
Communicate directly and professionally with senior business stakeholders, including VP-level contacts, without requiring guidance on tone or approach.
-
Participate in daily standups to report progress, plans, and blockers.
-
Keep program leadership copied on business-facing communications for visibility, while operating independently day to day.
-
Recognize appropriate scope boundaries for each ROPA entry, flagging items that extend beyond the intended process rather than pursuing them further.
Qualifications
-
Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
-
Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
-
Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.
Requirements
-
Proven, hands-on experience building or maintaining ROPAs in a North American context (US, Canada, Mexico, or similar); ROPA structure and methodology are largely consistent across these markets.
-
Prior experience operating at a senior analyst or engineer level within a privacy or GRC program, someone who has owned and driven ROPA-building work directly, not solely contributed as a business subject matter expert.
-
Comfort and professionalism engaging directly with senior stakeholders, including VPs, without requiring coaching on communication style.
-
Strong organizational skills and self-driven follow-up habits, able to track outstanding items at a granular, per-entry level across many concurrent stakeholders.
-
Familiarity with Quebec Law 25 or similar principle-based privacy regulations (e.g., GDPR) a plus, not required for candidates with strong general North American ROPA experience.
-
Comfortable working independently with light day-to-day oversight, while maintaining consistent visibility and communication with leadership.
Benefits
-
Salary range of $105,000β$135,000, depending on experience and location.
-
Medical, dental, vision plans
-
401(k) with matching
-
3 weeks of Paid Time Off. PLUS 8 paid company holidays and 2 flexible holidays for anything you want to celebrate!
-
Work/life balance β we know there's more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.
-
Opportunities to connect in person and remotely with a passionate, supportive team.
Company Description
Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.