Privacy Manager

Privacy Manager Location: Downtown Toronto (Hybrid, 1–2 days onsite per week) Salary: $120,000–$125,000 (target) + 15% bonus Reports To: Robert Ebel, Chief Operating Officer About Fundserv Fundserv is essential to Canada’s investment industry, enabling banks, credit unions, and investment companies to process transactions securely and efficiently. As a trusted and stable organization, Fundserv prioritizes privacy and security, ensuring that sensitive personal and financial data is protected. This is a highly visible role where your work will have real impact, helping shape and mature Fundserv’s privacy program during a period of modernization and growth. Role Overview As the Privacy Manager , you will be the subject matter expert (SME) for privacy at Fundserv. You will guide, implement, and enforce privacy regulations and best practices across the organization, balancing compliance with operational needs. You will assess privacy risks, evolve privacy programs, and ensure that personal and financial information is protected. This is a strategic, high-visibility role with significant ownership and influence. You will work closely with Legal, Risk, Internal Audit, IT, and other business teams to ensure Fundserv maintains privacy compliance across all operations. Key Responsibilities Act as the organization’s go‑to expert for privacy laws and regulations (Canada, US, EU). Provide guidance to business teams and management on interpreting privacy laws, internal policies, and industry standards. Advise on Privacy Impact Assessments (PIAs), Threat and Impact Assessments (TIAs), and other privacy‑related exercises. Privacy Program Development Develop, enhance, and maintain Fundserv’s privacy policies, procedures, and program infrastructure. Ensure consistent, effective, privacy‑compliant practices across the organization. Lead privacy assessments, including PIAs and data mapping exercises, for business processes, products, and services. Foster a strong privacy culture through awareness campaigns and training programs. Partner with Risk and Internal Audit to identify privacy risks and design effective controls. Support operational improvements while maintaining compliance with privacy regulations. Assist with vendor risk management, ensuring third‑party compliance with privacy requirements. Audit & Compliance Participate in CSAE 3000 / SOC 2 audits, ensuring privacy requirements are incorporated into internal controls and governance processes. Manage privacy‑related complaints and breach investigations in coordination with Legal. Stakeholder Collaboration Collaborate cross‑functionally with IT, Security, Legal, HR, and Product teams. Influence business units to adopt privacy best practices and maintain compliance with privacy legislation. Core Requirements / Must‑Haves 5+ years of professional experience in privacy program development or management. In‑depth knowledge of privacy laws in Canada (PIPEDA, provincial PIPAs), US (HIPAA, GLBA, CCPA), and EU (GDPR). Proven experience with PIAs, TIAs, and privacy breach preparedness. Strong understanding of IT systems, data flows, and security practices. Excellent communication, collaboration, and presentation skills. Ability to manage projects and drive privacy initiatives across multiple teams. Professional privacy certification (CIPP/C, CIPP/E, CIPM, or equivalent) is highly desirable. Preferred / Bonus Experience in financial services or IT‑driven organizations. Knowledge of SOC 2 / CSAE 3000 compliance frameworks. Experience with vendor privacy and third‑party risk management. Education in Business, Law, or Information Systems. Ideal Candidate Profile You are a proactive, self‑starter with the ability to manage multiple priorities in a fast‑paced, evolving IT environment. You have a track record of building privacy programs from the ground up or enhancing existing programs. You can translate complex privacy requirements into actionable guidance for business leaders. You are comfortable influencing stakeholders without direct authority and fostering a culture of compliance. Interview Process Phone screen – Initial assessment of experience and skills. Round 2 In‑person – December 17, 2025 (or early 2026). Round 3 Virtual w/ Internal Stakeholders – Early 2026. Why This Role is Compelling High visibility with direct influence on privacy program strategy. Opportunity to shape Fundserv’s privacy program during modernization. Exposure to senior leadership and cross‑functional collaboration. Competitive salary, hybrid work, and strong work‑life balance. Work for a respected and stable organization with long‑term impact. Seniority level: Associate Employment type: Full‑time Job function: Accounting/Auditing Industries: Staffing and Recruiting #J-18808-Ljbffr