As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. We’re looking to fill an opening for a Privacy Operations Specialist to join our Privacy Operations team. Reporting to the Manager, Privacy Operations, the Privacy Operations Specialist is responsible for the first-line privacy controls and day-to-day execution and delivery of Aviso’s Privacy Program. The role serves as a key operational point of contact for privacy-related inquiries, requests, and incidents across the organization. The Privacy Operations Specialist manages privacy incidents and breach reporting, data subject access requests (DSARs), privacy inquiries, program administration, and operational reporting. The role conducts Privacy Impact Assessments (PIAs), supports privacy risk mitigation across all business lines, and leverages AI-enabled tools to automate repetitive operational tasks. Through robust stakeholder engagement and process optimization, the incumbent ensures compliance with privacy legislation, regulatory requirements, and Aviso's privacy framework while fostering a culture of privacy awareness and accountability. The Privacy Operations Specialist plays a critical role in advancing the Privacy Program by operationalizing Privacy-by-Design principles, embedding privacy requirements into business processes and initiatives, and ensuring privacy risks are proactively identified, assessed, and addressed. As the primary 1B operational execution lead, the incumbent works closely with business, technology, product, and operational teams to integrate privacy considerations into decision-making while maintaining compliance with regulatory and organizational requirements. Lead the intake, assessment, investigation, and management of privacy incidents, breaches,



complaints, and inquiries, ensuring timely resolution, regulatory reporting (CIRO ComSet), and effective corrective action implementationManage the privacy inbox and serve as the primary operational lead for privacy requests, investigations, and program activities, acting as a trusted advisor to business stakeholders across the organizationTriage project and PIA intake requests and conduct routine Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), and privacy reviews for initiatives, vendors, technologies, and business processes, ensuring privacy risks are identified and mitigated early in the lifecycleAct as an embedded Privacy SME representative on operational squads, project teams, and business initiatives, providing practical guidance and driving the adoption of Privacy by Design principles throughout planning, development, implementation, and operationalization activitiesInfluence stakeholders and challenge business decisions where appropriate to ensure privacy requirements are effectively incorporated into products, services, processes, and operational workflowsDevelop, maintain, and enhance privacy operational processes, procedures, standards, and controls to support a scalable and sustainable privacy programMonitor and track remediation activities, corrective action plans, and outstanding privacy risks,



working with business owners to ensure timely closure and accountabilityMaintain privacy logs, trackers, and reporting dashboards that provide meaningful insights into program performance, operational effectiveness, and emerging risksLeverage AI-enabled tools and automation to streamline repetitive operational tasks, and support the implementation and optimization of privacy management technology and workflow solutions to enhance program maturity, efficiency, and oversightConduct ongoing vendor and third-party privacy monitoring, validate compliance with contractual privacy provisions, and support privacy requirements in vendor contract negotiations and renewalsMonitor emerging privacy risks, control gaps, and trends, identify recurring issues, and provide recommendations that strengthen privacy governance, operational effectiveness, and risk mitigationPartner with business, technology, legal, compliance, information security, and data governance teams to embed privacy requirements into operational processes and strategic initiativesMonitor the industry landscape to identify trends and implement best practices.
Execute all first-line (1B) privacy operational controls in accordance with Aviso’s control framework and privacy program requirementsManage and execute data subject access requests (DSARs) from intake through resolution, ensuring compliance with legislative timelines and documentation requirementsEscalate complex privacy matters, emerging risks, and issues requiring management decision to the Manager, Privacy Operations in a timely manner Degree or diploma in Business, Law, Information Technology, Risk Management, Privacy, or a related fieldIAPP certification (CIPP/C, CIPM, CIPT, or AIGP) preferred5+ years of progressive experience in privacy, compliance, risk

📌 Operations Manager Specialist (Winnipeg)
🏢 Aviso
📍 Winnipeg