Your Opportunity

We are seeking a Manager, Privacy Compliance Advisory to join our Risk Advisory practice. This replacement role will support organizations in navigating an increasingly complex privacy and data protection landscape by providing strategic advisory, compliance, governance, and assurance services.

Working closely with clients across a broad range of industries, the successful candidate will lead privacy assessments, regulatory compliance initiatives, governance program development, and technology-enabled privacy transformations. The role requires a strong understanding of Canadian and international privacy legislation, practical risk management, and the ability to translate regulatory requirements into business solutions.

Key Responsibilities

Client Delivery

• Lead end-to-end privacy advisory engagements (planning, execution, reporting).
• Assess compliance with privacy laws and regulations; perform gap and maturity assessments.
• Develop/privacy governance frameworks, policies, and operating models.
• Conduct PIAs/DPIAs and evaluate privacy controls across people, process, and technology.
• Support privacy-by-design for products, systems, and AI solutions.
• Advise on breach response, incident management, and regulatory notifications.
• Build remediation roadmaps and implementation plans.

Regulatory & Technical Advisory

• Advise on PIPEDA, Law 25, GDPR, CCPA, and other privacy regimes.
• Cover cross-border transfers, consent, data lifecycle, and retention.
• Address third-party risk, AI governance, and emerging privacy requirements.

Technology & Controls

• Advise on privacy controls across Microsoft Purview, M365, cloud platforms, and IAM.
• Focus on DLP, encryption, data classification, retention, and privacy automation tools.

Business Development

• Build client relationships and identify growth opportunities.
• Support proposals, pursuits, and thought leadership.
• Collaborate with cyber, AI, audit, ESG, and digital teams.

Leadership

• Manage multiple engagements and review deliverables.
• Coach and develop team members.
• Contribute to methodology and capability building.

How do we define success for your role?

• You demonstrate BDO's core values through all aspects of your work: Integrity, Respect and Collaboration
• You understand your client's industry, challenges, and opportunities; client describe you as positive, professional, and delivering high-quality work
• You identify, recommend, and are focused on effective service delivery to your clients
• You share in an inclusive and engaging work environment that develops, retains and attracts talent
• You actively participate in the adoption of digital tools and strategies to drive an innovative workplace
• You grow your expertise through learning and professional development

Your experience and education

• 6-10+ years in privacy, risk, cybersecurity, compliance, governance, or consulting.
• Client-facing consulting experience with strong delivery skills.
• Solid knowledge of Canadian privacy laws (PIPEDA, Quebec Law 25); GDPR/global frameworks an asset.
• Understanding of privacy governance, risk management, and control frameworks.
• Experience conducting Privacy Impact Assessments (PIAs).
• Strong report writing and executive presentation skills.
• Ability to manage multiple engagements in a fast-paced consulting environment.
• You have completed or pursuing your professional designation (CPA, CIA, CIPP/C, CISA)

The expected range of compensation for this role is $88,000-$134,000 annually.

Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.

Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It's about creating work experiences that meet everyone's needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role.

Code of Conduct: Our Code of Conduct sets clear standards for how we conduct business. It reflects our shared values and commitments and includes guiding principles to help us make ethical decisions and maintain trust with each other, our clients, and the public.

BDO may use artificial intelligence enabled tools to support certain aspects of the recruitment process. While these tools assist our teams, our use of AI does not replace human decision making, and all employment-related outcomes are made by BDO personnel.

More information on BDO Canada's Privacy Policy can be found here:

Privacy Policy | BDO Canada

Ready to make your mark at BDO? Click "Apply now" to send your up-to-date resume to one of our Talent Acquisition Specialists.

To explore other opportunities at BDO, check out our careers page