Manager, Data Privacy Advisory & Operations

Loblaw Companies Limited; Brampton; On-site; CAD 80,000 - 120,000; Full time

Job summary

Loblaw Companies Limited is seeking a Manager, Data Privacy Advisory & Operations to oversee compliance and data governance initiatives. This hybrid role requires managing customer access requests, supporting the development of data products, and conducting data privacy assessments. Ideal candidates have IAPP certifications and expertise in Canadian privacy laws. The position offers opportunities for innovation and collaboration in a fast-paced environment.

Qualifications

• Experience applying data governance and privacy principles to customer initiatives.
• Understanding of Canadian privacy laws and data protection frameworks.
• Ability to communicate technical concepts to diverse audiences.

Responsibilities

• Manage customer access requests ensuring compliance with privacy regulations.
• Support the design of customer data products and digital experiences.
• Conduct data privacy impact assessments and vendor reviews.

Skills

Data governance

Privacy by design

Interpersonal skills

Communication skills

Project management

Education

IAPP certification (CIPP/C, CIPP/M)

Background in data governance or cyber security

Job description

Manager, Data Privacy Advisory & Operations

Reporting to the Director of the Data Trust Center of Excellence (COE), the Manager, Data Privacy Advisory & Operations plays a pivotal hybrid role in building customer loyalty and trust. This unique opportunity involves providing strategic data governance and privacy advisory to business and product teams while driving the operational excellence of the programs that underpin our data‑handling practices. The role is central to empowering the organization to leverage data responsibly, ensuring data and privacy are key ingredients in our innovative products and services.

Responsibilities

• Manage customer access requests and inquiries, ensuring timely and accurate responses within established privacy regulations and policies.
• Partner with business, technology, and product teams to support the design and implementation of customer data products and personalized digital experiences.
• Champion a culture of data responsibility by embedding data and privacy by design into the agile development lifecycle through stakeholder engagement, comprehensive privacy training, and awareness activities.
• Assess and manage internal and third‑party data privacy risks through data privacy impact assessments (DPIAs), vendor assessments, and contract reviews, recommending controls that enable the business while ensuring compliance.
• Contribute to the strategic growth and operational excellence of the Data Trust COE by supporting the progression of comprehensive data and privacy programs, underpinned by clear policies, procedures, standards, and guidelines aligned with the evolving regulatory landscape.
• Produce periodic metrics and reporting, providing insights into program performance to identify areas for improvement and demonstrate compliance.

Who you are

• An innovative and proactive self‑starter who embraces data and privacy as a business enabler, consistently taking the initiative to drive projects forward and deliver practical, scalable solutions.
• Excellent interpersonal and communication skills, with the ability to distill complex concepts into clear terms for diverse audiences, from technical teams to senior management.
• Ability to thrive in a fast‑paced, changing environment while organizing and managing multiple projects with competing priorities and deadlines.

What you bring

• International Association of Privacy Professionals (IAPP) certification (e.g., CIPP/C, CIPP/M) is strongly preferred; equivalent experience or a background in data governance, data management, or cyber security is a strong asset.
• Proven experience applying data governance and privacy‑by‑design to complex direct‑to‑customer (DTC) initiatives involving customer data, personalization, and AI.
• Expertise in Canadian privacy principles, data management, data protection frameworks, and industry best practices.

Requests for accommodation due to a disability (visible or invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities. Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.