Privacy Compliance Manager

IVARI•Toronto, ON

16h•CA$96,000 - CA$132,000•Hybrid

About The Position

This is a new position. As Privacy Compliance Manager, you will help lead ivari’s privacy program and support the responsible handling of personal information across the organization. You will help maintain privacy frameworks, policies, tools, and training, while overseeing key Privacy Office activities such as incident response, privacy requests, complaints, regulatory reporting, and Privacy Impact Assessments. In this role, you will act as the Business Unit Compliance Liaison for privacy, provide second-line oversight of privacy controls, and support reporting to senior management and the Board through the Chief Privacy Officer. You will also work closely with Legal, Information Security, IT, HR, and business teams to promote strong privacy practices and compliance with Canadian privacy laws.

Requirements

Minimum six years of experience in privacy and regulatory compliance, risk advisory and reporting roles, preferably within financial services
Strong knowledge of privacy legislation, regulatory guidance, and emerging regulatory trends, with the ability to apply requirements pragmatically to business operations.
Demonstrated experience assessing privacy risk, conducting Privacy Impact Assessments (PIAs), defining KRIs/KPIs, and recommending and implementing risk mitigation strategies.
Experience providing second‑line oversight and challenge of first‑line risk and control assessments.
Strong leadership, project management, and stakeholder engagement skills, with the ability to lead cross‑functional initiatives.
Excellent written and verbal communication skills, including executive‑level reporting and presentations for senior management and Boards.
Strong analytical judgment, discretion in handling sensitive information, and a customer‑centric, ethical approach to privacy complaints and breach management.

Nice To Haves

IAPP Certified Information and Privacy Professional (CIPP) Canada or Europe, and/or Certified Privacy Manager (CIPM) and/or Canadian Risk Management Designation (CRM) highly desirable.
Certifications in privacy technology, data protection officer, or information systems security are an asset
Proficiency in French is an asset.

Responsibilities

Apply Canadian privacy laws and organizational policies to real‑world business initiatives
Advise business teams on compliant collection, use, disclosure, retention, and safeguarding of personal information
Support the Chief Privacy Officer in leading ivari wide regulatory change initiatives related to Privacy.
Identify privacy risks and recommend mitigation strategies aligned with a risk‑based compliance approach
Maintain and enhance privacy compliance artifacts, including: Privacy impact assessment (PIA) determinations and tracking ongoing remediation, Privacy risk register and KPI tracking, Incident logs and breach documentation
Support ongoing compliance with Quebec Law 25 accountability and governance requirements
Contribute to development and maintenance of privacy policies, procedures, and standards
Ensure documentation of policies and procedures to comply with regulatory requirements and evidence controls
Produce quarterly reports for senior management and executive leadership
Lead the design and enhancement of Privacy Impact Assessment tools and risk assessments for moderate‑ to high‑risk initiatives
Evaluate data flows, purposes, safeguards, and proportionality
Document findings, mitigation plans, and approvals in compliance records
Monitor completion of remediation actions arising from PIAs
Develop and maintain Privacy incident response plan
Investigate, analyze and handle all privacy incidents reported to the Privacy Office
Assist the Chief Privacy Officer and Legal with regulatory inquiries, audits, or investigations
Prepare compliance evidence and documentation for internal or external reviews
Is a Privacy subject‑matter resource for Compliance and business teams
Provide guidance and training to Privacy Analysts and operational teams
Support privacy awareness initiatives and compliance training programs