The posting
Aviso Wealth:
At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at www.aviso.ca.
The Opportunity:
We’re looking to fill an opening for a Privacy Operations Specialist to join our Privacy Operations team.
Reporting to the Manager, Privacy Operations, the Privacy Operations Specialist is responsible for the first-line privacy controls and day-to-day execution and delivery of Aviso’s Privacy Program. The role serves as a key operational point of contact for privacy-related inquiries, requests, and incidents across the organization.
The Privacy Operations Specialist manages privacy incidents and breach reporting, data subject access requests (DSARs), privacy inquiries, program administration, and operational reporting. The role conducts Privacy Impact Assessments (PIAs), supports privacy risk mitigation across all business lines, and leverages AI-enabled tools to automate repetitive operational tasks. Through strong stakeholder engagement and process optimization, the incumbent ensures compliance with privacy legislation, regulatory requirements, and Aviso's privacy framework while fostering a culture of privacy awareness and accountability.
As oneaviso:
- We Care – You do the right thing for clients, partners and colleagues. You build trusted relationships, champion service excellence, and contribute to a culture where people feel valued and supported
- We Dare –You challenge the status quo with bold ideas and fresh perspectives. You embrace change, seek opportunities to innovate and are comfortable exploring new ways of working
- We Share – You collaborate openly and build meaningful relationships. You seek out diverse perspectives, share your knowledge and work together to help colleagues, clients and partners succeed
- We Deliver – You take ownership of your work, honour your commitments and focus on delivering meaningful results. You hold yourself accountable and continuously look for ways to improve
What your day looks like:
The Privacy Operations Specialist plays a critical role in advancing the Privacy Program by operationalizing Privacy-by-Design principles, embedding privacy requirements into business processes and initiatives, and ensuring privacy risks are proactively identified, assessed, and addressed. As the primary 1B operational execution lead, the incumbent works closely with business, technology, product, and operational teams to integrate privacy considerations into decision-making while maintaining compliance with regulatory and organizational requirements.
Additional responsibilities include but are not limited to:
- Lead the intake, assessment, investigation, and management of privacy incidents, breaches, complaints, and inquiries, ensuring timely resolution, regulatory reporting (CIRO ComSet), and effective corrective action implementation
- Manage the privacy inbox and serve as the primary operational lead for privacy requests, investigations, and program activities, acting as a trusted advisor to business stakeholders across the organization
- Triage project and PIA intake requests and conduct routine Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), and privacy reviews for initiatives, vendors, technologies, and business processes, ensuring privacy risks are identified and mitigated early in the lifecycle
- Act as an embedded Privacy SME representative on operational squads, project teams, and business initiatives, providing practical guidance and driving the adoption of Privacy by Design principles throughout planning, development, implementation, and operationalization activities
- Influence stakeholders and challenge business decisions where appropriate to ensure privacy requirements are effectively incorporated into products, services, processes, and operational workflows
- Develop, maintain, and enhance privacy operational processes, procedures, standards, and controls to support a scalable and sustainable privacy program
- Monitor and track remediation activities, corrective action plans, and outstanding privacy risks, working with business owners to ensure timely closure and accountability
- Maintain privacy logs, trackers, and reporting dashboards that provide meaningful insights into program performance, operational effectiveness, and emerging risks
- Leverage AI-enabled tools and automation to streamline repetitive operational tasks, and support the implementation and optimization of privacy management technology and workflow solutions to enhance program maturity, efficiency, and oversight
- Conduct ongoing vendor and third-party privacy monitoring, validate compliance with contractual privacy provisions, and support privacy requirements in vendor contract negotiations and renewals
- Monitor emerging privacy risks, control gaps, and trends, identify recurring issues, and provide recommendations that strengthen privacy governance, operational effectiveness, and risk mitigation
- Partner with business, technology, legal, compliance, information security, and data governance teams to embed privacy requirements into operational processes and strategic initiatives
- Monitor the industry landscape to identify trends and implement best practices.
- Execute all first-line (1B) privacy operational controls in accordance with Aviso’s control framework and privacy program requirements
- Manage and execute data subject access requests (DSARs) from intake through resolution, ensuring compliance with legislative timelines and documentation requirements
- Escalate complex privacy matters, emerging risks, and issues requiring management decision to the Manager, Privacy Operations in a timely manner
Requirements
Your experience and skills:
- Degree or diploma in Business, Law, Information Technology, Risk Management, Privacy, or a related field
- IAPP certification (CIPP/C, CIPM, CIPT, or AIGP) preferred
- 5+ years of progressive experience in privacy, compliance, risk management, governance, legal operations, or a related discipline, with demonstrated responsibility for executing and managing operational privacy functions
- Proven hands-on experience managing privacy incidents and breaches, including intake, investigation, root cause analysis, remediation tracking, and regulatory reporting obligations
- Experience managing data subject rights requests, privacy inquiries, complaints, and related operational privacy processes from intake through resolution
- Demonstrated experience conducting Privacy Impact Assessments (PIAs), vendor privacy reviews, and privacy risk assessments for business initiatives, technology implementations, and third-party engagements
- Strong knowledge of Canadian privacy legislation, regulatory requirements, and best practices, including PIPEDA, Bill C-36, Law 25, provincial privacy laws, breach reporting obligations, cross-border data transfer mechanisms, adequacy assessments, and emerging frameworks relevant to financial institutions and wealth managers
- Demonstrated operational privacy expertise, including implementing and managing privacy processes, controls, workflows, and governance activities within a complex, multi-stakeholder organization
- Proven ability to operationalize privacy requirements by translating regulatory obligations and privacy risks into practical business processes, procedures, controls, and day-to-day operating practices
- Strong stakeholder management and influencing skills, with the ability to build trust, gain buy-in, and embed Privacy by Design principles across business, technology, operational, and project teams
- Experience supporting change management initiatives, including implementing new processes, driving adoption of privacy controls, and embedding sustainable privacy practices across an organization
- Strong analytical and problem-solving skills with the ability to investigate issues, identify root causes, assess risks, and develop practical recommendations
- Experience developing and maintaining privacy metrics, dashboards, reports, and trend analysis to support management oversight, regulatory compliance, and continuous improvement initiatives
- Demonstrated ability to manage multiple competing priorities, work independently, and exercise sound judgment in a fast-paced and evolving environment
- Excellent verbal and written communication skills, including the ability to explain complex privacy concepts to technical and non-technical audiences
- Fluent communication skills in English are required and bilingual skills in French are an asset
- Strong organizational and project coordination skills with a proven ability to drive initiatives from planning through implementation
- Advanced proficiency with Microsoft Office, including Excel, PowerPoint, Word, Outlook, and Teams
- Experience within financial services, wealth management, insurance, securities, or credit unions is preferred
- Experience with privacy management software, workflow tools, ServiceNow, Archer, or GRC platforms is preferred
- Experience supporting regulatory submissions and regulator interactions is preferred
- Knowledge of privacy automation, AI governance, or data governance practices is preferred
- Experience with records management and data lifecycle governance is preferred
Benefits
Why Aviso Wealth?
At Aviso Wealth, you will find a dynamic and inclusive culture that rewards innovation and celebrates success. Here are a few things that set us apart:
- Competitive compensation package that rewards and recognizes individual contributions
- Excellent health, dental and insurance benefits to meet the diverse needs of our employees
- Generous vacation time, fitness benefit, parental leave top-up options
- Matching contributions to our retirement program
- Commitment to the continuous improvement of our staff through learning & development and an education assistance program
- Regular social events to foster teamwork
Your Information
By submitting your application, you consent to the collection, use, and disclosure of your provided personal information for the purposes of assessing your qualifications and suitability for employment with Aviso. Your information will be handled in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial legislation. Your data may be shared with authorized personnel involved in the recruitment process and retained only as long as necessary to fulfill these purposes or as required by law.
Further information is available on the Privacy link on our Career Page – Privacy Policies
Equal Employment Opportunity
Aviso welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process.
We thank all applicants for their interest, however, only those selected for further consideration will be contacted.
No recruiters or agencies, please.
Company Overview:
Aviso is a leading wealth management and investment services provider for the Canadian financial industry, with approximately $145 billion in total assets under administration and management, and over 1,000 employees. We’re building a comprehensive, technology-enabled, client-centric wealth services ecosystem. Our clients include our partners, advisors, and investors. We’re a trusted partner for nearly all credit unions across Canada, in addition to a wide range of portfolio managers, investment dealers, insurance and trust companies, and introducing brokers. Our partners depend on Aviso for specific solutions that give them a competitive edge in a rapidly evolving, highly competitive industry. Our investment dealer and mutual fund dealer and our insurance services support thousands of investment advisors. Our asset manager, NEI Investments, specializes in investing responsibly. Our online brokerage, Qtrade Direct Investing®, empowers self-directed investors, and our fully automated investing service, Qtrade Guided Portfolios®, serves investors who prefer a hands-off approach. Aviso Correspondent Partners provides custodial and carrying broker services to a wide range of firms. We have offices in Toronto, Vancouver, and Montreal. Aviso is backed by the collective strength of our owners: the credit union Centrals, Co-operators/CUMIS, and Desjardins. We’re proud to power businesses that empower investors.
A career with Aviso means being part of a group of talented, energetic professionals who live their values every day, and belonging to an organization dedicated to your success and career development. If you’re looking for interesting and challenging work, at a company committed to its people, apply to join our team.
Salary
This position is posted with an expected salary range of $100,000 - $110,000 CAD annually. Individual compensation packages are based on various factors unique to each candidate and the requirements of the position.
