Consultant - Senior Privacy Analyst

ABOUT KALLES GROUP:

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group —and having fun while doing it.
WHAT YOU WILL DO:

Our client, a large global retailer, is building out a new Records of Processing Activities (ROPA) program to support its Canadian operations, largely from the ground up. In this role, you'll partner directly with the client's privacy engineering team and work across a wide range of business units to document how each line of business handles data, translating existing global ROPA structures into accurate, Canada-specific entries.

If you have hands-on ROPA-building experience, are comfortable owning stakeholder relationships independently, and know how to stay organized across a large, multi-threaded workload, we want to speak with you.
You will:

- Build out a Canadian ROPA program largely from the ground up, partnering directly with the client's privacy engineering team.

- Lead discovery and requirements-gathering sessions with business stakeholders across approximately 10-12 business units, documenting each unit's systems, processes, and data handling practices.

- Draft and maintain ROPA entries using established templates, adapting existing global ROPA structures to reflect Canada-specific business processes.

- Proactively track and follow up on outstanding items across 24+ stakeholders, maintaining clear visibility into what's needed, from whom, and by when.

- Communicate directly and professionally with senior business stakeholders, including VP-level contacts, without requiring guidance on tone or approach.

- Participate in daily standups to report progress, plans, and blockers.

- Keep program leadership copied on business-facing communications for visibility, while operating independently day to day.

- Recognize appropriate scope boundaries for each ROPA entry, flagging items that extend beyond the intended process rather than pursuing them further.

ABOUT YOU:

Your values:

- Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.

- Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.

- Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

Your experience:

- Proven, hands-on experience building or maintaining ROPAs in a North American context (US, Canada, Mexico, or similar); ROPA structure and methodology are largely consistent across these markets.

- Prior experience operating at a senior analyst or engineer level within a privacy or GRC program, someone who has owned and driven ROPA-building work directly, not solely contributed as a business subject matter expert.

- Comfort and professionalism engaging directly with senior stakeholders, including VPs, without requiring coaching on communication style.

- Strong organizational skills and self-driven follow-up habits, able to track outstanding items at a granular, per-entry level across many concurrent stakeholders.

- Familiarity with Quebec Law 25 or similar principle-based privacy regulations (e.g., GDPR) a plus, not required for candidates with strong general North American ROPA experienc