Manager, Data Privacy Advisory & Operations

Loblaw Companies Limited•Brampton, ON

5d•Hybrid

About The Position

Reporting to the Director of the Data Trust Center of Excellence (COE), the Manager, Data Privacy Advisory & Operations plays a pivotal hybrid role in building customer loyalty and trust. This is a unique opportunity to both provide strategic data governance and privacy advisory to business and product teams and drive the operational excellence of the programs that underpin our data-handling practices. You will be central to empowering the organization to leverage data responsibly, ensuring data and privacy is a key ingredient in our innovative products and services.

Requirements

An innovative and proactive self-starter who embraces data and privacy as a business enabler, consistently taking the initiative to drive projects forward and deliver practical, scalable solutions.
Excellent interpersonal and communication skills, with the ability to distill complex concepts into clear terms for diverse audiences, from technical teams to senior management.
Ability to thrive in a fast-paced, changing environment while organizing and managing multiple projects with competing priorities and deadlines.
Expertise in Canadian privacy principles, data management, data protection frameworks, and industry best practices.
Proven experience applying data governance and privacy-by-design to complex direct-to-customer (DTC) initiatives involving customer data, personalization, and AI.

Nice To Haves

International Association of Privacy Professionals (IAPP) certification (e.g., CIPP/C, CIPP/M) is strongly preferred, or equivalent experience.
A background or certification in data governance, data management, or cyber security is a strong asset.

Responsibilities

Manage customer access requests and inquiries, ensuring timely and accurate responses within established privacy regulations and policies.
Partner with business, technology, and product teams to support the design and implementation of customer data products and personalized digital experiences.
Champion a culture of data responsibility by embedding data and privacy by design into the agile development lifecycle through stakeholder engagement, comprehensive privacy training, and awareness activities.
Assess and manage internal and third-party data privacy risks through data privacy impact assessments (DPIAs), vendor assessments, and contract reviews, recommending controls that enable the business while ensuring compliance.
Contribute to the strategic growth and operational excellence of the Data Trust COE by supporting the progression of comprehensive data and privacy programs, underpinned by clear policies, procedures, standards, and guidelines aligned with the evolving regulatory landscape.
Produce periodic metrics and reporting, providing insights into program performance to identify areas for improvement and demonstrate compliance.