Manager, Privacy
- Burlington, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Time Type
Regular
Job Description
Privacy Manager
Department: Legal and Corporate Affairs
Manager’s Title: Senior Director, Privacy Officer
Position Summary
The Privacy Manager oversees the operational execution of the enterprise privacy program across Canadian and U.S. operations. Acting as a bridge between business operations, product engineering, cybersecurity, and legal teams, this role is responsible for ensuring privacy compliance, conducting risk assessments, and embedding Privacy by Design into customer-facing products and services, network initiatives, and digital platforms. The ideal candidate brings strong expertise in North American privacy legislation, operational risk management, and data governance, with a proven track record of converting regulatory requirements into practical, scalable business workflows.
Key Responsibilities
- Operational Compliance: Operationalize compliance with PIPEDA, Quebec Law 25, and relevant provincial and state regulations across customer-facing and internal operations.
- Privacy Impact Assessments (PIAs): Conduct PIAs for internal initiatives, software implementations, and new vendor onboarding.
- Incident & Breach Response: Triage privacy incidents, coordinate response efforts with the Privacy Officer and other incident stakeholders and execute breach containment protocols.
- Data Subject Rights Management: Manage workflows for individual access requests, consent withdrawals, rectification, and deletion requests.
- Vendor Privacy Risk: Evaluate third-party vendor privacy practices during procurement and review data processing agreements.
- Training & Awareness: Design and deliver ongoing privacy training and awareness programs across business units.
- Privacy Reporting: Contribute to the development of performance measures to demonstrate the privacy program delivers value, and is efficient and effective in meeting compliance requirements.
ACADEMIC TRAINING
- University Degree in a relevant field (Public Administration, Law, Information Science).
- Certified Information Privacy Professional for Canada (CIPP/C), Certified Information Privacy Technologist (CIPT), and/or Certified Information Privacy Manager (CIPM).
- 8–10+ years in developing, utilizing and implementing privacy maturity and risk assessment tools as well as privacy methodologies, policies and procedures.
- Exceptional stakeholder management, communication, and prioritization skills, with a proven track record of translating complex regulatory concepts into practical business solutions
- Bilingualism (English and French, written and spoken) is required. Due to regular collaboration with teams, clients, and partners located outside of Quebec, proficiency in English is necessary for this role.
- Flexibility: Yes, we think that what you do matters. At work and at home.
- Fun: We laugh a lot, it makes every day brighter.
- Discounted services: We provide amazing services to our clients, and you’ll get them at home, because you deserve them.
- Rewarding Pay: Let's be honest, everybody likes to make a good salary. We offer attractive compensation packages, and it comes with a great culture.
- Benefits: We’ve got you covered.
- Career Evolution: Join us and we will give you the tools to achieve your career goals!
- Technology: You have a passion for technology? Excellent, we do too. Here, you will manage, influence, play, create, fix, and shape the industry.
Montréal, QC
Company
Cogeco Connexion Inc
At Cogeco, we know that different backgrounds, perspectives, and beliefs can bring critical value to our business. The strength of this diversity enhances our ability to imagine, innovate, and grow as a company. So, we are committed to doing everything in our power to create a more diverse and inclusive world of belonging.
By creating a culture where all our colleagues can bring their best selves to work, we’re doing our part to build a more equitable workplace and world. From professional development to personal safety, Cogeco constantly strives to create an environment that welcomes and nurtures all. We make the health and well-being of our colleagues one of our highest priorities, for we know engaged and appreciated employees equate to a better overall experience for our customers.
If you need any accommodations to apply or as part of the recruitment process, please contact us confidentially at inclusion@cogeco.com
More about this job
Responsibilities
Oversee operational execution of the enterprise privacy program across Canadian and U.S. operations, including compliance, privacy impact assessments, incident response, and individual privacy rights workflows. Assess vendor privacy practices, deliver training, embed Privacy by Design in products and services, and contribute to privacy program performance reporting.
Requirements
Requires a university degree in a relevant field and one or more privacy certifications, such as CIPP/C, CIPT, or CIPM. Candidates should have 8–10+ years of experience with privacy maturity and risk assessment tools, methodologies, policies, and procedures, along with strong stakeholder and communication skills and fluency in written and spoken English and French.
Skills
- Privacy Compliance
- Privacy Impact Assessments
- Privacy Risk Assessment
- Incident and Breach Response
- Data Subject Rights Management
- Vendor Privacy Risk Management
- Data Governance
- Privacy by Design
- PIPEDA
- Quebec Law 25
- Stakeholder Management
- Communication
- Prioritization
- Privacy Training and Awareness
- Privacy Reporting
- Bilingual Communication
Benefits
- Flexible Work
- Discounted Services
- Attractive Compensation
- Professional Development
- Career Development
- Technology
Visa sponsorship
Not detected in the job text
Categories
- Legal
- Management & Leadership
- Security & Safety
- Technology
Keywords
- PIPEDA
- Quebec Law 25
- Canadian Privacy Legislation
- U.S. Privacy Regulations
- Privacy Impact Assessments
- Privacy by Design
- Privacy Maturity
- Risk Assessment
- Operational Risk Management
- Data Governance
- Privacy Compliance
- Incident Response
- Breach Containment
- Data Subject Rights
- Consent Management
- Vendor Privacy Risk
- Data Processing Agreements
- Privacy Training
- Privacy Reporting
- CIPP/C
- CIPT
- CIPM
- Legal and Corporate Affairs
- Telecommunications