Privacy Risk Specialist

Aviso is a leading wealth management and investment services provider in Canada. This role focuses on privacy risk management within Aviso's Legal & Privacy Department and requires strong analytical and communication skills, as well as the ability to lead privacy initiatives.Base pay rangeCA$115,000.00/yr - CA$130,000.00/yrOverviewWe are looking for a seasoned Privacy Risk Specialist to help enhance Aviso's data privacy framework, implement privacy strategies and processes, and lead Privacy Impact Assessments (PIAs). The role requires knowledge of privacy law, regulations, and best practices, and the ability to work with multiple departments to manage privacy inquiries and privacy risk programs.Who you areService - You put clients' needs first, advocate service excellence, and proactively develop strategic partnerships that position Aviso Wealth as a trusted advisor.Execution - You are goal-oriented, take ownership, and continuously seek to improve.Collaboration - You work well with others to drive results, build trust, and foster inclusion.Your day-to-dayAs a Privacy Risk Specialist, you will be a subject matter expert and a key contributor to Aviso's Privacy Program. You will lead the maintenance and execution of a comprehensive PIAs framework, embed privacy into system design, and collaborate with IT, development, and project teams to ensure secure and compliant data handling.Serve as the central point of contact for privacy-related projects, vendor engagements, new system integrations, and AI-related inquiriesLead the development and implementation of Aviso's privacy management framework, including tools, policies, processes, and trainingPromote a culture of privacy awareness and provide expert guidance across the organizationResponsibilitiesAssess and conduct PIAs, TIAs, AI Assessments, and Privacy Compliance Audits; perform privacy risk and vendor assessments; embed Privacy by Design principlesCreate and maintain processes for TIAs; ensure alignment with cross-jurisdictional data processing requirementsMonitor and interpret emerging privacy legislation and AI governance standards to ensure proactive complianceCollaborate to maintain records of processing activities and data lifecycle complianceEvaluate vulnerabilities from PIAs/TIAs/AI Assessments and lead corrective actionsCommunicate privacy risks and ensure consistency of practices across business unitsConduct systematic audits to identify areas for improvement and non-complianceDevelop and track KPIs/KRIs related to privacy assessments and program performancePresent regular reports to executives and governance committees; maintain remediation logsWork with business units, IT, legal, and regulators to uphold privacy governanceProvide privacy consultation during system development, procurement, and modernization; participate in product operating and pilot programsRequirementsYour experience and skills:Privacy Impact Assessment Expertise: 3–5 years conducting PIAs for medium to high complexity projects (cloud and on-premise)Operational Privacy Experience: 5+ years in a corporate or financial industry privacy rolePrivacy Requirements Drafting: 5+ years drafting/reviewing privacy requirements for data sharing agreementsLegislative Knowledge: Deep understanding of Canadian privacy law (PIPEDA, provincial laws like BC/AB PIPA, Quebec Law 25), CASL, FISA 702, EO 12333, OECD Privacy Principles, and related AI regulationsTechnical PIA Execution: Experience performing PIAs/TIAs on complex IT applications (cloud and on-premise)Information Security Acumen: Strong grasp of security concepts relevant to privacy riskReporting & Issue Management: Skilled in presenting PIA findings and coordinating remediationPrivacy Control Optimization: Ability to recommend improvements across business linesInvestigations & Audits: Experience with privacy investigations, reviews, and auditsPolicy Development & Implementation: Track record of developing/privacy policies and proceduresCollaboration & Influence: Ability to build trust and work across teamsRegulatory Engagement: Experience with regulatory mattersCross-Functional Coordination: Manage multi-department workstreamsSelf-Starter Mindset: Innovative, analytical, and proactiveNice-to-HavesEducational Background: Degree in law, IT, business, or related fieldCertifications: IAPP (CIPP/C, CIPP/M) or AIGPIT/Data Governance Experience: Familiarity with IT systems or data governanceIndustry Experience: Financial services or securitiesLanguage Skills: English required; French is a plusBenefitsCompetitive compensation packageComprehensive health, dental, and insurance benefitsGenerous vacation, fitness benefit, parental leave top-upRetirement program with matching contributionsLearning & development and education assistanceRegular social eventsEqual Employment OpportunityAviso welcomes applications from all qualified individuals. If you require an accommodation, we will work with you to meet your needs in the hiring process. We thank all applicants for their interest; only those selected will be contacted.Company OverviewAviso is a leading wealth management and investment services provider for the Canadian financial industry, with around $145 billion in assets under administration and management, and over 1,000 employees. We offer a technology-enabled, client-centric wealth services ecosystem with partners, advisors, and investors. We are committed to our values and encourage career development. For more information, visit our Career Page. #J-18808-Ljbffr