Specialist, Privacy

Definity Insurance Company • Toronto, ON

10h • Hybrid

About The Position

The Data Privacy Specialist reports to the Data Privacy Manager within Definity’s Enterprise Data Office and supports privacy operations, compliance, and risk management initiatives. Working closely with internal stakeholders, including Legal, you will help ensure privacy practices meet evolving regulatory requirements. You will support Definity’s privacy posture across systems, processes, and data flows, contributing to compliance with PIPEDA and Quebec Law 25. Your experience with RoPA, data mapping, PIAs, and privacy education will help enable scalable, compliant, and responsible data practices across the organization.

Requirements

• Bachelor's degree in law, Information Management, Computer Science, or related field
• 3+ years of experience in privacy, compliance and familiarity with data governance frameworks and privacy-enhancing technologies
• Experience conducting PIAs and managing data privacy programs
• Strong knowledge of regulatory requirements and privacy laws, including Quebec Law 25, PIPEDA and other relevant legislation
• Familiarity with data governance frameworks and privacy-enhancing technologies
• Ability to solve problems and analyze complex issues, distill them into clear insights and deliver concise, business-oriented advice to cross-functional teams

Nice To Haves

• IAPP certification is an asset

Responsibilities

• Serve as the first point of contact for privacy inquiries, triaging requests, providing operational guidance, and determining when PIAs, RoPA updates, data mapping changes, or other privacy controls are required.
• Support privacy operations related to third‑party data processing, including documenting vendor activities, maintaining RoPA and data maps, and partnering with Legal and Procurement on privacy due diligence.
• Assist with privacy‑related business continuity planning by maintaining and governing the enterprise data map to ensure alignment with RoPA and PIAs.
• Develop and maintain privacy metrics and reporting (e.g., PIAs, customer withdrawal requests, data mapping and retention compliance) to support risk visibility, audit readiness, and continuous improvement.
• Oversee adherence to data retention and disposal policies, including monitoring data purge initiatives and escalating non‑compliance in accordance with audit guidelines.

Benefits

• Company share ownership program
• Incentive Program
• Pension and savings programs, with company-matched RRSP contributions
• Paid volunteer days and company matching on charitable donations
• Educational resources, tuition assistance, and paid time off to study for exams
• Focus on inclusion with employee groups, support for gender affirmation surgery, access to BIPOC counsellors, access to programs for working parents
• Wellness and recognition programs
• Discounts on products and services

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level