Senior Manager, Data & Privacy

Loblaw Companies Limited; Brampton; On-site; CAD 120,000 - 154,000; Full time

Job summary

Loblaw Companies Limited is seeking a Senior Manager, Data & Privacy to lead the enterprise data and privacy program across the health business portfolio, reporting to the Director, Data & Privacy.

This hybrid role focuses on risk assessments, governance, training, and cross‑functional collaboration to embed privacy by design in agile delivery, while partnering with Legal, IT, Compliance and product teams for strategic guidance.

Qualifications

• Significant experience applying privacy laws and principles in complex environments.
• Strong strategic advisory capabilities with independent issue management.
• Ability to lead privacy programs and communicate to senior leaders.

Responsibilities

• Lead implementation and maturity of enterprise data and privacy program components.
• Perform risk assessments and recommend privacy controls.
• Integrate data governance and privacy into agile development lifecycle.
• Oversee data privacy processes, standards, tools, and guidance.
• Deliver privacy training and awareness across Loblaw and subsidiaries.
• Provide senior escalation support on complex privacy matters.

Skills

Privacy by Design

Strategic advisory

Vendor risk management

Data governance

Communication skills

Leadership

Cross-functional collaboration

Healthcare privacy knowledge

Education

IAPP Certification (CIPP/C)

Job description

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.
At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

Please note the Loblaw hybrid work model is 4 days in office

Senior Manager, Data & Privacy

The Data Trust Office is an enablement-first function. We believe in embedding data and privacy into our products and services to build customer loyalty and trust, which ensures compliance by default. In this role, you will be supporting the delivery and ongoing maturity of data and privacy advisory services, providing strategic direction, senior oversight, and practical guidance to support Loblaw and its subsidiaries. This role reports to the Director, Data & Privacy.

WHAT YOU'LL DO:

• Lead the implementation and ongoing maturity ofenterprise data and privacy program components (e.g. data privacy assessments, vendor assessments, contract reviews, advisory consults,reporting, and program governance) in a way that is fit for purpose for our health businesses.
• Perform risk assessments and provide recommendations regarding data and privacy controls, applying sound judgement, design-thinking, and a practical balance between business enablement and compliance.
• Drive innovation and enterprise strategy to build data governance and privacy into the agile technology development lifecycle and culture at Loblaw and its subsidiaries.
• Lead the optimization and evolution of data and privacy processes, standards, tools, and guidance based on changes to privacy laws, industry standards, business objectives, and emerging privacy risks.
• Manage and deliver data and privacy training and awareness across Loblaw and its subsidiaries to strengthen privacy culture and accountability.
• Oversee third party data and privacy risk management activities, including reviewing and advising on agreements and statements of work, conducting vendor risk assessments, and providing senior escalation support on complex matters.
• Establish and produce periodic metrics and reporting, providing insights into program performance, key risks, trends, compliance status, and areas for continuous improvement for senior management and governance forums.
• Provide senior support on privacy incidents and inquiries, including access requests and complaints, supporting investigation, risk assessment, escalation, remediation, and timely and accurate responses in accordance with applicable privacy laws, regulations, and policies.
• Partner with Legal, Information Security, Risk, Compliance, Technology, Product, and business stakeholders to provide integrated, business-oriented data and privacy advice.
• Provide guidance, coaching, and quality review to team members and stakeholders to promote consistent, scalable, and practical data and privacy advisory outcomes.

WHAT YOU BRING:

• Significant experience applying privacy laws and principles, including Privacy by Design, in complex business and technology environments. International Association of Privacy Professionals (IAPP) certification (i.e. CIPP/C or equivalent certification) preferred.
• Privacy experience within a complex healthcare environment, and knowledge of Canadian health privacy laws is preferred. Experience in corporate retail, digital health, or other direct-to-consumer industries is also an asset.
• Demonstrated ability to provide strategic advice, exercise sound judgement, and independently manage and upscale complex privacy, data governance, and business issues.
• A self-starter who is proactive, takes initiative, and consistently drives complex projects and program priorities forward with minimal supervision.
• Strong ability to grasp complex and ambiguous problems and distill them into clear, practical, and scalable requirements, recommendations, and decision points.
• Collaborative and influential leader who can build trusted relationships, negotiate effectively, constructively challenge assumptions, and achieve practical, balanced outcomes across multi-stakeholder groups.
• Experience embedding privacy requirements through technical delivery programs, including through policy development, training and education, advocacy, and scalable privacy-by-design practices.
• Strong interpersonal, communication, organizational, facilitation, and presentation skills, including the ability to present succinctly and effectively to senior leaders and varying levels of management.
• Experience developing or improving privacy and data governance processes, playbooks, standards, controls, metrics, or reporting is an asset.
• Experience working in data governance, information security, risk management, compliance, technology, or digital product environments is an asset.

Our commitment to Sustainability and Social Impact is an essential part of the way we do business, and we focus our attention on areas where we can have the greatest impact. Our approach to sustainability and social impact is based on three pillars – Environment, Sourcing and Community – and we are constantly looking for ways to demonstrate leadership in these important areas. Our CORE Values – Care, Ownership, Respect and Excellence – guide all our decision-making and come to life through our Blue Culture. We offer our colleagues progressive careers, comprehensive training, flexibility, and other competitive benefits – these are some of the many reasons why we are one of Canada’s Top Employers, Canada’s Best Diversity Employers, Canada’s Greenest Employers & Canada’s Top Employers for Young People.

If you are unsure whether your experience matches every requirement above, we encourage you to apply anyway. We are looking for varied perspectives which include diverse experiences that we can add to our team.
We have a long-standing focus on diversity, equity and inclusion because we know it will make our company a better place to work and shop. We are committed to creating accessible environments for our colleagues, candidates and customers. Requests for accommodation due to a disability (which may be visible or invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities.

Please Note

Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

Hiring Range / Échelle salariale à l’embauche :$120,000.00 - $154,000.00 / 120.000,00$ - 154.000,00$ (per year / par an)A candidate’s experience and knowledge as well as the geographical region in which the position is located may be factored into the pay a candidate receives for this position. This posting is for an existing vacancy. The Company uses artificial intelligence for the purpose of screening, assessing and/or selecting applicants for this position. / L’expérience et les connaissances d’un candidat ainsi que la région géographique dans laquelle le poste est situé peuvent être prises en compte dans la rémunération qu’un candidat reçoit pour ce poste. Cette offre d’emploi concerne un poste vacant existant. L’entreprise utilise l’intelligence artificielle dans le but de filtrer, d’évaluer et/ou de sélectionner les candidats à ce poste.