Privacy Operations Specialist

Aviso Wealth:At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at
The Opportunity:We’re looking to fill an opening for a Privacy Operations Specialist to join our Privacy Operations team.
Reporting to the Manager, Privacy Operations, the Privacy Operations Specialist is responsible for the first-line privacy controls and day-to-day execution and delivery of Aviso’s Privacy Program. The role serves as a key operational point of contact for privacy-related inquiries, requests, and incidents across the organization.
The Privacy Operations Specialist manages privacy incidents and breach reporting, data subject access requests (DSARs), privacy inquiries, program administration, and operational reporting. The role conducts Privacy Impact Assessments (PIAs), supports privacy risk mitigation across all business lines, and leverages AI-enabled tools to automate repetitive operational tasks. Through strong stakeholder engagement and process optimization, the incumbent ensures compliance with privacy legislation, regulatory requirements, and Aviso's privacy framework while fostering a culture of privacy awareness and accountability.
As one aviso:We Care – Youdo the right thing forclients,partnersand colleagues. Youbuild trusted relationships,championservice excellence, andcontribute to a culture where people feel valued and supported
We Dare –You challenge the status quo with bold ideasand fresh perspectives. Youembrace change, seek opportunities toinnovateand are comfortable exploring new ways of working
We Share – Youcollaborate openlyand build meaningful relationships. Youseek outdiverse perspectives, share yourknowledgeand work together to helpcolleagues,clientsand partners succeed
We Deliver – Youtake ownership of your work,honouryourcommitmentsand focus on delivering meaningful results.You hold yourself accountable and continuously look for ways toimprove
What your day looks like:The Privacy Operations Specialist plays a critical role in advancing the Privacy Program by operationalizing Privacy-by-Design principles, embedding privacy requirements into business processes and initiatives, and ensuring privacy risks are proactively identified, assessed, and addressed. As the primary 1B operational execution lead, the incumbent works closely with business, technology, product, and operational teams to integrate privacy considerations into decision-making while maintaining compliance with regulatory and organizational requirements.
Additional responsibilities include but are not limited to:
Lead the intake, assessment, investigation, and management of privacy incidents, breaches, complaints, and inquiries, ensuring timely resolution, regulatory reporting (CIRO ComSet), and effective corrective action implementationManage the privacy inbox and serve as the primary operational lead for privacy requests, investigations, and program activities, acting as a trusted advisor to business stakeholders across the organizationTriage project and PIA intake requests and conduct routine Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), and privacy reviews for initiatives, vendors, technologies, and business processes, ensuring privacy risks are identified and mitigated early in the lifecycleAct as an embedded Privacy SME representative on operational squads, project teams, and business initiatives, providing practical guidance and driving the adoption of Privacy by Design principles throughout planning, development, implementation, and operationalization activitiesInfluence stakeholders and challenge business decisions where appropriate to ensure privacy requirements are effectively incorporated into products, services, processes, and operational workflowsDevelop, maintain, and enhance privacy operational processes, procedures, standards, and controls to support a scalable and sustainable privacy programMonitor and track remediation activities, corrective action plans, and outstanding privacy risks, working with business owners to ensure timely closure and accountabilityMaintain privacy logs, trackers, and reporting dashboards that provide meaningful insights into program performance, operational effectiveness, and emerging risksLeverage AI-enabled tools and automation to streamline repetitive operational tasks, and support the implementation and optimization of privacy management technology and workflow solutions to enhance program maturity, efficiency, and oversightConduct ongoing vendor and third-party privacy monitoring, validate compliance with contractual privacy provisions, and support privacy requirements in vendor contract negotiations and renewalsMonitor emerging privacy risks, control gaps, and trends, identify recurring issues, and provide recommendations that strengthen privacy governance, operational effectiveness, and risk mitigationPartner with business, technology, legal, compliance, information security, and data governance teams to embed privacy requirements into operational processes and strategic initiativesMonitor the industry landscape to identify trends and implement best practices.Execute all first-line (1B) privacy operational controls in accordance with Aviso’s control framework and privacy program requirementsManage and execute data subject access requests (DSARs) from intake through resolution, ensuring compliance with legislative timelines and documentation requirementsEscalate complex privacy matters, emerging risks, and issues requiring management decision to the Manager, Privacy Operations in a timely manner
Your experience and skills:Degree or diploma in Business, Law, Information Technology, Risk Management, Privacy, or a related fieldIAPP certification (CIPP/C, CIPM, CIPT, or AIGP) preferred5+ years of progressive experience in privacy, compliance, risk management, governance, legal operations, or a related discipline, with demonstrated responsibility for executing and managing operational privacy functionsProven hands-on experience managing privacy incidents and breaches, including intake, investigation, root cause analysis, remediation tracking, and regulatory reporting obligationsExperience managing data subject rights requests, privacy inquiries, complaints, and related operational privacy processes from intake through resolutionDemonstrated experience conducting Privacy Impact Assessments (PIAs), vendor privacy reviews, and privacy risk assessments for business initiatives, technology implementations, and third-party engagementsStrong knowledge of Canadian privacy legislation, regulatory requirements, and best practices, including PIPEDA, Bill C-36, Law 25, provincial privacy laws, breach reporting obligations, cross-border data transfer mechanisms, adequacy assessments, and emerging frameworks relevant to financial institutions and wealth managersDemonstrated operational privacy expertise, including implementing and managing privacy processes, controls, workflows, and governance activities within a complex, multi-stakeholder organizationProven ability to operationalize privacy requirements by translating regulatory obligations and privacy risks into practical business processes, procedures, controls, and day-to-day operating practicesStrong stakeholder management and influencing skills, with the ability to build trust, gain buy-in, and embed Privacy by Design principles across business, technology, operational, and project teamsExperience supporting change management initiatives, including implementing new processes, driving adoption of privacy controls, and embedding sustainable privacy practices across an organizationStrong analytical and problem-solving skills with the ability to investigate issues, identify root causes, assess risks, and develop practical recommendationsExperience developing and maintaining privacy metrics, dashboards, reports, and trend analysis to support management oversight, regulatory compliance, and continuous improvement initiativesDemonstrated ability to manage multiple competing priorities, work independently, and exercise sound judgment in a fast-paced and evolving environmentExcellent verbal and written communication skills, including the ability to explain complex privacy concepts to technical and non-technical audiencesFluent communication skills in English are required and bilingual skills in French are an assetStrong organizational and project coordination skills with a proven ability to drive initiatives from planning through implementationAdvanced proficiency with Microsoft Office, including Excel, PowerPoint, Word, Outlook, and TeamsExperience within financial services, wealth management, insurance, securities, or credit unions is preferredExperience with privacy management software, workflow tools, ServiceNow, Archer, or GRC platforms is preferredExperience supporting regulatory submissions and regulator interactions is preferredKnowledge of privacy automation, AI governance, or data governance practices is preferredExperience with records management and data lifecycle governance is preferred
Why Aviso Wealth?At Aviso Wealth, you will find a dynamic and inclusive culture that rewards innovation and celebrates success.
Here are a few things that set us apart:
Competitive compensation package that rewards and recognizes individual contributionsExcellent health, dental and insurance benefits to meet the diverse needs of our employeesGenerous vacation time, fitness benefit, parental leave top-up optionsMatching contributions to our retirement programCommitment to the continuous improvement of our staff through learning & development and an education assistance programRegular social events to foster teamwork
Your InformationBy submitting your application, you consent to the collection, use, and disclosure of your provided personal information for the purposes of assessing your qualifications and suitability for employment with Aviso. Your information will be handled in accordance with applicable Canadian privacy laws, including thePersonal Information Protection and Electronic Documents Act (PIPEDA)and relevant provincial legislation. Your data may be shared with authorized personnel involved in the recruitment process and retained only as long as necessary to fulfill these purposes or as required by law.
Equal Employment OpportunityAviso welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process.
Company Overview:Aviso is a leading wealth management and investment services provider for the Canadian financial industry, with approximately $145 billion in total assets under administration and management, and over 1,000 employees. We’re building a comprehensive, technology-enabled, client-centric wealth services ecosystem. Our clients include our partners, advisors, and investors. We’re a trusted partner for nearly all credit unions across Canada, in addition to a wide range of portfolio managers, investment dealers, insurance and trust companies, and introducing brokers. Our partners depend on Aviso for specific solutions that give them a competitive edge in a rapidly evolving, highly competitive industry. Our investment dealer and mutual fund dealer and our insurance services support thousands of investment advisors. Our asset manager, NEI Investments, specializes in investing responsibly. Our online brokerage, Qtrade Direct Investing® empowers self-directed investors, and our fully automated investing service, Qtrade Guided Portfolios®, serves investors who prefer a hands-off approach. Aviso Correspondent Partners provides custodial and carrying broker services to a wide range of firms. We have offices in Toronto, Vancouver, and Montreal. Aviso is backed by the collective strength of our owners: the credit union Centrals, Co-operators/CUMIS, and Desjardins. We’re proud to power businesses that empower investors.
SalaryThis position is posted with an expected salary range of $100,000 - $110,000 CAD annually. Individual compensation packages are based on various factors unique to each candidate and the requirements of the position.
#J-18808-Ljbffr