Director of Risk, Compliance and Information - Vancouver, Canada - YWCA Metro Vancouver

YWCA Metro Vancouver

Verified Company

Vancouver, Canada

2 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Job DescriptionThe Director of Risk, Compliance and IT provides leadership for the IT and Health and Safety teams; is responsible for ensuring that the YWCA's private, confidential and sensitive information is secure and for integrating data and information systems across the growing number of YWCA sites.

This position reviews significant leases and other encumbrances and oversees our compliance with licensing and regulatory bodies.

They ensure that we are keeping the records we need to demonstrate that we meet the standards of our accreditation bodies.

Key areas of oversight:

Security and privacy of data and sensitive information
Enterprise Risk Management
Information technology strategy and systems, including cybersecurity
Health and Safety, including business continuity and disaster response planning
Quality and effectiveness of contracts, leases and legal agreements
Conformance with accrediting and regulatory bodies and requirements
Other duties as required

Roles and responsibilities:

Privacy and Risk Management

Provide overall oversight for enterprise risk management systems, including risk mitigation and reporting strategies.
Provides leadership for organizational health and safety, business continuity and disaster response planning
Oversee tools and processes for management of YWCA's operational and financial risk and help to build a culture of risk awareness and reduction with staff
Recommend, develop and maintain organizational privacy and information management policies, standards and procedures to ensure the organization meets legal, regulatory and contractual obligations
Keep abreast of evolving compliance demands, risk exposures and changes in industry and technology; ensure that YWCA responds
In partnership with managers and senior management team, develop, facilitate, train and promote activities to foster employee awareness about compliance and privacy across the organization
Oversee the YWCA's response to privacy breaches
Manage privacy complaints and both internal and external requests for access to personal information

Information Technology and Systems

Provide overall oversight for IT department, including strategic and operational components, to ensure optimal performance and alignment with organizational strategic plan.
Engage with employees across the organization to understand business systems, and identify opportunities to streamline business processes through the use of technology.
Lead business process analysis prioritization and standardization, including data collection and reporting
Oversee data and information security, storage and management, including policy for cloudbased systems, handing of sensitive client and membership data, and integration of information flow across multiple systems (e.g.
Motion Soft, Volunteer Impact, ADP WFN etc.)
Ensure the integration and security of data and information across the organization
Develop and oversee policy related to compliance, technology and risk, and develop response plans for data loss or breach
Develop and oversee policies, principles and procedures for software procurement

Contracts and Leases

As required, work closely with the VP, Finance to review legal documents and support the assessment and management of financial impact and risk associated with contracts, leases and other agreements.
Participate, as needed, in negotiations related to leases, contracts and agreements

Legal and accreditation oversight

Oversee compliance with corporate legal obligations, insurance policy requirements
Monitor processes related to organizational accreditation, licensing, staff accreditation, etc. (CARF, childcare licensing, Lobbyists Registry, etc.)

Required Skills:

Completion of a degree in business administration, technology, law, or related discipline
10 years + progressive experience in operational management, preferably in a charity or nonprofit environment.
7 years + in policy, IT strategy, privacy and security, or standards and compliance role
Proactive, strategic and visionary individual who has a proven track record of providing leadership, guidance and support to a team of IT professionals and positively engaging with other stakeholders.
Strong relationship building skills with knowledge of Inclusion, Diversity, Equity and Inclusion, and the ability to identify biases in systems and processes and collaborate with others to implement changes
Handson experience selecting, implementing and evaluating software, integrating software systems and connecting software and paperbased systems
Knowledge of enterprise risk management frameworks
Experience reviewing and developing contract language and partnership agreements
Experience with policy creation, development and continuous quality improvement
Excellent technical, analytical and communication skills
Values driven and service oriented
Comfortable in a collaborative t