Aviso:At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at <a href="https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.aviso.ca%2F&amp;data=05%7C01%7Cgwilliams%40aviso.ca%7C60dd7ee3a5424b5b24be08db49a35c45%7C8bf75a43b0eb42ab81d6e397059ed15e%7C0%7C0%7C638184738201947724%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=LHwunwpXGiDBWlj9f2%2Fc%2Bjrhb2FU5LcnBSO7kW88ZqQ%3D&amp;reserved=0">www.aviso.ca</a>.The Opportunity:We’re looking for a seasoned Privacy Risk Specialist with a strong work ethic along with excellent analytical and communication skills to join our privacy team. The ideal candidate will be someone who is creative and thinks outside-the-box and is a self-starter who takes ownership over initiatives.Reporting to Director, Privacy, the Privacy Risk Specialist will help enhance Avisos data privacy framework and implement privacy strategies and processes to support Avisos Legal &amp; Privacy Department and other members of the Company as required. The Privacy Risk Specialist will implement industry best practices and solutions to reduce risk and ensure the protection of customer data. The Privacy Risk Specialist will leverage their knowledge of privacy law, regulations and best practices to assist with privacy inquiries from all departments of the organization and will act as an initial point of contact and lead for the management of all Privacy Impact Assessments (PIAs). Who you are:<ul><li> Service – You put your clients’ needs first. You advocate service excellence, and work to deliver client-centric solutions, and proactively develop strategic partnerships that allow Aviso Wealth to become a trusted advisor and partner</li><li> Execution – You are committed to achieving your goals and to succeed. This includes focusing on “getting things done”, as well as recognizing and taking advantage of opportunities as they arise. You are consistently looking for ways to improve your personal best and see value in continuous improvement. You take accountability for your actions and learn from mistakes</li><li> Collaboration – You work collaboratively with others with the common goal of driving positive results. Making meaningful contributions to your team to achieve organizational goals is a priority. You proactively encourage collaboration, build trust and inclusion, and work to establish effective relationships both inside and outside of the organization</li></ul>What your day looks like:As a Privacy Risk Specialist, you will be a seasoned subject matter expert and key contributor to the advancement of Aviso’s Privacy Program, ensuring that privacy obligations are met in alignment with internal policies, Privacy by Design principles, and applicable legislation. You will lead the maintenance and execution of a comprehensive Privacy Impact Assessment (PIA) framework, including control standards that support enterprise-wide compliance and risk mitigation. Working closely with IT, developers and project teams, you will embed privacy into system design through control mapping and proactive risk identification, enabling secure and compliant data handling across all environments.Privacy Program Leadership<ul><li>Seasoned SME to serve as the central point of contact for all privacy-related projects, vendor engagements, new system integrations, and AI-related inquiries</li><li>Lead the development and implementation of Aviso’s privacy management framework, including tools, policies, processes, and training</li><li>Promote a culture of privacy awareness and provide expert guidance across the organization</li></ul>Assessment &amp; Compliance<ul><li>Conduct complex and technical Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), AI Assessments, and Privacy Compliance Audits, while also performing privacy risk and vendor assessments. These activities embed Privacy by Design and Default principles into products and services to ensure robust privacy compliance and risk mitigation</li><li>Create and maintain processes for TIAs and ensure alignment with cross-jurisdictional data processing requirements</li><li>Monitor and interpret emerging privacy legislation and AI governance standards to ensure proactive compliance</li></ul>Governance &amp; Oversight<ul><li>Collaborate with internal stakeholders to maintain records of processing activities and ensure data lifecycle compliance</li><li>Evaluate vulnerabilities identified through PIAs, TIAs or AI Assessments and lead the implementation of corrective actions</li><li>Communicate emerging privacy risks and manage consistency of practices across business units</li><li>Conduct systematic audits to identify areas for improvement and non-compliance</li></ul>Reporting &amp; Metrics<ul><li>Develop and track KPIs/KRIs related to privacy assessments and program performance</li><li>Present regular reports and insights to executives and governance committees when applicable</li><li>Maintain logs of outstanding remediation plans and ensure timely updates from initiative owners</li></ul>Stakeholder Engagement<ul><li>Work closely with business units, IT, legal, and external regulators to uphold privacy governance</li><li>Provide privacy consultation and support during system development, procurement, and modernization initiatives</li><li>Ensure timely identification and resolution of privacy risks without impacting project timelines</li><li>Participate in the Product Operating Model and provide subject matter expertise on privacy controls during the design and implementation of pilot programs</li></ul>Your experience and skills:<ul><li>Privacy Impact Assessment Expertise: Minimum 3 -5 years of experience conducting PIAs for medium to high complexity projects, including both cloud-based and on-premise environments</li><li>Operational Privacy Experience: At least 5 years of hands-on operational privacy experience in a corporate or financial  industry setting</li><li>Privacy Requirements Drafting: 5+ years of experience drafting and reviewing privacy requirements for data sharing agreements</li><li>Legislative Knowledge: Deep understanding and practical implementation of Canadian privacy legislation, including PIPEDA, provincial laws (e.g., BC/AB PIPA, Quebec’s Law 25), CASL, FISA 702, EO 12333, OECD Privacy Principles, and other emerging privacy and AI regulations</li><li>Technical PIA Execution: Proven experience performing PIAs and TIAs on complex IT applications across cloud and on-premise infrastructures</li><li>Information Security Acumen: Strong grasp of technical and information security concepts relevant to privacy risk assessment</li><li>Reporting &amp; Issue Management: Skilled in preparing and communicating PIA findings to business units, tracking outstanding issues, and coordinating with project teams for resolution</li><li>Privacy Control Optimization: Ability to provide actionable recommendations to enhance privacy controls across business lines</li><li>Investigations &amp; Audits: Experience conducting privacy investigations, compliance reviews, and audits where applicable</li><li>Policy Development &amp; Implementation: Demonstrated success in initiating, developing, and implementing privacy policies, procedures, and practices using solid project management skills</li><li>Collaboration &amp; Influence: Ability to build trust, foster professional relationships, and contribute to an inclusive and high-performance culture</li><li>Regulatory Engagement: Experience working with regulatory bodies and navigating regulatory matters</li><li>Cross-Functional Coordination: Capable of managing workstreams that span multiple departments</li><li>Self-Starter Mindset: Innovative thinker with strong analytical, research, documentation, and project management skills</li></ul>Nice-to-Haves<ul><li>Educational Background: Degree in law, information technology, business, or a related field</li><li>Certifications: IAPP certifications such as CIPP/C,  CIPP/M, or AIGP</li><li>IT/Data Governance Experience: Familiarity with IT systems or data governance practices</li><li>Industry Experience: Background in the financial services or securities industry</li><li>Language Skills: Fluent communication skills in English are required and bilingual skills in French are an asset</li></ul>

Aviso Wealth

Similar Remote Jobs