Privacy Operations Specialist

Aviso Wealth:
At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at www.aviso.ca.
The Opportunity:
We’re looking to fill an opening for a Privacy Operations Specialist to join our Privacy Operations team.
Reporting to the Manager, Privacy Operations, the Privacy Operations Specialist is responsible for the first-line privacy controls and day-to-day execution and delivery of Aviso’s Privacy Program. The role serves as a key operational point of contact for privacy-related inquiries, requests, and incidents across the organization.
The Privacy Operations Specialist manages privacy incidents and breach reporting, data subject access requests (DSARs), privacy inquiries, program administration, and operational reporting. The role conducts Privacy Impact Assessments (PIAs), supports privacy risk mitigation across all business lines, and leverages AI-enabled tools to automate repetitive operational tasks. Through strong stakeholder engagement and process optimization, the incumbent ensures compliance with privacy legislation, regulatory requirements, and Aviso's privacy framework while fostering a culture of privacy awareness and accountability.
As oneaviso:
We Care – You do the right thing for clients, partners and colleagues. You build trusted relationships, champion service excellence, and contribute to a culture where people feel valued and supported
We Dare –You challenge the status quo with bold ideas and fresh perspectives. You embrace change, seek opportunities to innovate and are comfortable exploring new ways of working
We Share – You collaborate openly and build meaningful relationships. You seek out diverse perspectives, share your knowledge and work together to help colleagues, clients and partners succeed
We Deliver – You take ownership of your work, honour your commitments and focus on delivering meaningful results. You hold yourself accountable and continuously look for ways to improve
What your day looks like:
The Privacy Operations Specialist plays a critical role in advancing the Privacy Program by operationalizing Privacy-by-Design principles, embedding privacy requirements into business processes and initiatives, and ensuring privacy risks are proactively identified, assessed, and addressed. As the primary 1B operational execution lead, the incumbent works closely with business, technology, product, and operational teams to integrate privacy considerations into decision-making while maintaining compliance with regulatory and organizational requirements.
Additional responsibilities include but are not limited to:
Lead the intake, assessment, investigation, and management of privacy incidents, breaches, complaints, and inquiries, ensuring timely resolution, regulatory reporting (CIRO ComSet), and effective corrective action implementation
Manage the privacy inbox and serve as the primary operational lead for privacy requests, investigations, and program activities, acting as a trusted advisor to business stakeholders across the organization
Triage project and PIA intake requests and conduct routine Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), and privacy reviews for initiatives, vendors, technologies, and business processes, ensuring privacy risks are identified and mitigated early in the lifecycle
Act as an embedded Privacy SME representative on operational squads, project teams, and business initiatives, providing practical guidance and driving the adoption of Privacy by Design principles throughout planning, development, implementation, and operationalization activities
Influence stakeholders and challenge business decisions where appropriate to ensure privacy requirements are effectively incorporated into products, services, processes, and operational workflows
Develop, maintain, and enhance privacy operational processes, procedures, standards, and controls to support a scalable and sustainable privacy program
Monitor and track remediation activities, corrective action plans, and outstanding privacy risks, working with business owners to ensure timely closure and accountability
Maintain privacy logs, trackers, and reporting dashboards that provide meaningful insights into program performance, operational effectiveness, and emerging risks
Leverage AI-enabled tools and automation to streamline repetitive operational tasks, and support the implementation and optimization of privacy management technology and workflow solutions to enhance program maturity, efficiency, and oversight
Conduct ongoing vendor and third-party privacy monitoring, validate compliance with contractual privacy provisions, and support privacy requirements in vendor contract negotiations and renewals
Monitor emerging privacy risks, control gaps, and trends, identify recurring issues, and provide recommendations that strengthen privacy governance, operational effectiveness, and risk mitigation
Partner with business, technology, legal, compliance, information security, and data governance teams to embed privacy requirements into operational processes and strategic initiatives
Monitor the industry landscape to identify trends and implement best practices.
Execute all first-line (1B) privacy operational controls in accordance with Aviso’s control framework and privacy program requirements
Manage and execute data subject access requests (DSARs) from intake through resolution, ensuring compliance with legislative timelines and documentation requirements
Escalate complex privacy matters, emerging risks, and issues requiring management decision to the Manager, Privacy Operations in a timely manner
Requirements
Your experience and skills:
Degree or diploma in Business, Law, Information Technology, Risk Management, Privacy, or a related field
IAPP certification (CIPP/C, CIPM, CIPT, or AIGP) preferred
5+ years of progressive experience in privacy, compliance, risk management, governance, legal operations, or a related discipline, with demonstrated responsibility for executing and managing operational privacy functions
Proven hands-on experience managing privacy incidents and breaches, including intake, investigation, root cause analysis, remediation tracking, and regulatory reporting obligations
Experience managing data subject rights requests, privacy inquiries, complaints, and related operational privacy processes from intake through resolution
Demonstrated experience conducting Privacy Impact Assessments (PIAs), vendor privacy reviews, and privacy risk assessments for business initiatives, technology implementations, and third-party engagements
Strong knowledge of Canadian privacy legislation, regulatory requirements, and best practices, including PIPEDA, Bill C-36, Law 25, provincial privacy laws, breach reporting obligations, cross-border data transfer mechanisms, adequacy assessments, and emerging frameworks relevant to financial institutions and wealth managers
Demonstrated operational privacy expertise, including implementing and managing privacy processes, controls, workflows, and governance activities within a complex, multi-stakeholder organization
Proven ability to operationalize privacy requirements by translating regulatory obligations and privacy risks into practical business processes, procedures, controls, and day-to-day operating practices
Strong stakeholder management and influencing skills, with the ability to build trust, gain buy-in, and embed Privacy by Design principles across business, technology, operational, and project teams
Experience supporting change management initiatives, including implementing new processes, driving adoption of privacy controls, and embedding sustainable privacy practices across an organization
Strong analytical and problem-solving skills with the ability to investigate issues, identify root causes, assess risks, and develop practical recommendations
Experience developing and maintaining privacy metrics, dashboards, reports, and trend analysis to support management oversight, regulatory compliance, and continuous improvement initiatives
Demonstrated ability to manage multiple competing priorities, work independently, and exercise sound judgment in a fast-paced and evolving environment
Excellent verbal and written communication skills, including the ability to explain complex privacy concepts

Work arrangement
No