If I give an employee access to Reports in HRIS, will they be able to see sensitive data for all employees?

No- the reporting engine respects all permissions.  Employees will only see information in the reporting engine that they can see on other (and their own) employees' profiles.