Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Privacy Operations Specialist executing privacy controls, assessments, incidents, and DSARs for Aviso, a Canadian wealth management and investment services provider. Embedding Privacy by Design across business and technology teams.

Responsibilities

  • Execute and deliver Aviso’s first-line privacy controls and day-to-day Privacy Program activities
  • Manage privacy incidents, breaches, complaints, inquiries, and breach reporting, including CIRO ComSet reporting
  • Manage the privacy inbox and act as the primary operational contact for privacy requests and investigations
  • Triage project and PIA intake requests
  • Conduct Privacy Impact Assessments, Transfer Impact Assessments, and privacy reviews for initiatives, vendors, technologies, and business processes
  • Embed Privacy by Design principles into planning, development, implementation, and operationalization
  • Act as a Privacy SME on operational squads, project teams, and business initiatives
  • Influence stakeholders and challenge business decisions to incorporate privacy requirements
  • Develop, maintain, and enhance privacy processes, procedures, standards, and controls
  • Monitor remediation activities, corrective action plans, and outstanding privacy risks
  • Maintain privacy logs, trackers, reporting dashboards, and program performance reports
  • Use AI-enabled tools and automation to streamline repetitive operational tasks
  • Support privacy management technology and workflow solutions
  • Conduct vendor and third-party privacy monitoring and validate contractual privacy provisions
  • Support privacy requirements in vendor contract negotiations and renewals
  • Monitor emerging privacy risks, control gaps, trends, and industry best practices
  • Partner with business, technology, legal, compliance, information security, and data governance teams
  • Execute first-line privacy operational controls under Aviso’s control framework
  • Manage DSARs from intake through resolution in compliance with legislative timelines
  • Escalate complex privacy matters and emerging risks to the Manager, Privacy Operations

Requirements

  • Degree or diploma in Business, Law, Information Technology, Risk Management, Privacy, or a related field
  • IAPP certification (CIPP/C, CIPM, CIPT, or AIGP) preferred
  • 5+ years of progressive experience in privacy, compliance, risk management, governance, legal operations, or a related discipline
  • Hands-on experience managing privacy incidents and breaches, including intake, investigation, root cause analysis, remediation tracking, and regulatory reporting
  • Experience managing data subject rights requests, privacy inquiries, complaints, and related operational privacy processes
  • Experience conducting Privacy Impact Assessments (PIAs), vendor privacy reviews, and privacy risk assessments
  • Strong knowledge of Canadian privacy legislation, regulatory requirements, and best practices, including PIPEDA, Bill C-36, Law 25, provincial privacy laws, breach reporting obligations, cross-border data transfer mechanisms, and adequacy assessments
  • Operational privacy expertise implementing and managing privacy processes, controls, workflows, and governance activities
  • Ability to translate regulatory obligations and privacy risks into practical business processes, procedures, controls, and operating practices
  • Strong stakeholder management and influencing skills
  • Experience supporting change management initiatives
  • Strong analytical and problem-solving skills
  • Experience developing and maintaining privacy metrics, dashboards, reports, and trend analysis
  • Ability to manage multiple competing priorities, work independently, and exercise sound judgment
  • Excellent verbal and written communication skills
  • Fluent communication skills in English required; bilingual French is an asset
  • Strong organizational and project coordination skills
  • Advanced proficiency with Microsoft Office, including Excel, PowerPoint, Word, Outlook, and Teams
  • Experience within financial services, wealth management, insurance, securities, or credit unions preferred
  • Experience with privacy management software, workflow tools, ServiceNow, Archer, or GRC platforms preferred
  • Experience supporting regulatory submissions and regulator interactions preferred
  • Knowledge of privacy automation, AI governance, or data governance practices preferred
  • Experience with records management and data lifecycle governance preferred

Benefits

  • Competitive compensation package that rewards and recognizes individual contributions
  • Excellent health, dental and insurance benefits
  • Generous vacation time
  • Fitness benefit
  • Parental leave top-up options
  • Matching contributions to retirement program
  • Learning & development opportunities
  • Education assistance program
  • Regular social events
  • Accommodation support throughout the hiring process

Job title

Job type

Full Time

Experience level

Mid levelSenior

Salary

CA$100,000 - CA$110,000 per year

Degree requirement

No Education Requirement

Tech skills

ServiceNow

Location requirements

HybridTorontoCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.