Senior Manager, Information Compliance – AI Governance & Privacy

master-TMS•Toronto, ON

9d•CA$140,000 - CA$170,000•Hybrid

About The Position

Simon-Kucher is seeking a Senior Manager, Information Compliance - AI Governance & Privacy to join their Legal, Compliance & Risk function within the Information Compliance Team. This role, reporting to the Head of Information Compliance with a dotted line to the Chief Compliance Officer (CCO), focuses on AI compliance, information security, privacy, and governance. The position is a senior individual contributor role requiring a hybrid profile with expertise in privacy and AI governance, legal/compliance judgment, and strong technical fluency. The primary responsibility is to ensure AI tools, solutions, platforms, and products are developed and used responsibly, securely, and in compliance with statutory requirements, client confidentiality, contractual commitments, and internal policies. This is a hands-on role that involves understanding technology, translating requirements into practical controls, and developing scalable governance patterns.

Requirements

7+ years of relevant experience in privacy engineering, AI governance, technology compliance, information security, cyber/privacy GRC, data protection, cloud governance, product compliance, legal/compliance operations with technical implementation exposure, or a related field.
Demonstrated technical fluency in modern technology environments, including the ability to read and challenge architecture diagrams, data-flow diagrams, solution designs, system integration patterns, security/privacy control mappings, and vendor technical documentation.
Hands-on or implementation-adjacent experience with technical controls such as identity and access management, role-based access controls, data classification, encryption, logging and monitoring, DLP, retention/deletion, cloud/SaaS governance, secure SDLC, or AI tool governance.
Experience translating legal, regulatory, contractual, client confidentiality, or internal policy requirements into technical or operational controls that can be implemented by technology teams.
Ability to advise senior stakeholders and influence cross-functional teams without relying on direct reporting authority.
Strong analytical judgment and the ability to balance risk, business needs, user experience, and practical implementation.
Excellent communication skills, including the ability to explain complex compliance and technology concepts in plain language.
Ability to manage multiple priorities independently in a fast-moving, international environment.
Degree in Information Technology, Computer Science, Engineering, Information Security, Law, Compliance, or a related field; equivalent practical experience will also be considered.
Professional fluency in English.

Nice To Haves

Experience with AI governance, Responsible AI, generative AI governance, machine learning governance, model risk management, privacy engineering, security architecture, or AI lifecycle controls.
Familiarity with privacy, security, and AI governance frameworks such as NIST AI RMF, NIST Privacy Framework, ISO 27001, SOC 2, CIS Controls, OWASP, or similar frameworks.
Privacy, AI, security, or governance certifications such as AIGP, CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISM, CRISC, or similar.
Experience with governance, privacy, or GRC tools such as OneTrust, ServiceNow GRC, Archer, Jira, Confluence, or similar platforms.
Experience in consulting, professional services, technology, SaaS, financial services, healthcare, or another international and regulated environment.
Familiarity with US, Canadian, and global privacy and AI governance requirements, including US state privacy laws, Canadian privacy principles, GDPR concepts, vendor risk, cross-border data considerations, and client confidentiality requirements.
German or another European language is a plus but not required.

Responsibilities

Embed AI governance and privacy into technology solutions, helping teams build and use AI-enabled tools, products, platforms, and workflows in a compliant, secure, and responsible way from the start.
Translate privacy, AI governance, client confidentiality, information security, contractual, and internal policy requirements into actionable technical controls, implementation standards, and security guardrails.
Review technical designs and data flows, assessing architecture diagrams, data-flow diagrams, AI workflow designs, vendor/tool documentation, integration patterns, cloud/SaaS configurations, and product requirements to identify risks and recommend controls.
Advise on privacy and security control implementation, providing practical guidance on controls such as identity and access management, role-based access, data classification, encryption, retention and deletion, logging and monitoring, DLP, auditability, human oversight, and secure AI use.
Partner with project, data, AI, IT, and security teams to advise on compliant solution design, data use, vendor and tool use, confidentiality safeguards, and risk mitigations.
Support AI and privacy governance reviews by assessing AI use cases, data sources, platforms, vendors, model or tool behavior, prompt and output handling, and solution designs to identify risks and recommend practical solutions.
Build scalable governance frameworks by developing and maintaining playbooks, checklists, control libraries, standards, guidance materials, and reusable architecture/control patterns.
Promote awareness and responsible adoption through training and communication initiatives to help colleagues use AI and data responsibly while protecting client information and confidential data.