Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role is within the Information Compliance Team, reporting to the Head of Information Compliance with a dotted line to the Chief Compliance Officer. The team focuses on AI compliance, information security, privacy, and governance to protect data and enable responsible technology adoption. This is a senior individual contributor role requiring a hybrid profile of privacy and AI governance expertise, legal/compliance judgment, and technical fluency to engage in technical design discussions.

Responsibilities

Embed AI governance and privacy into technology solutions to help teams build and use AI-enabled tools, products, platforms, and workflows in a compliant, secure, and responsible way.
Translate privacy, AI governance, client confidentiality, information security, contractual, and internal policy requirements into actionable technical controls, implementation standards, and security guardrails.
Review technical designs and data flows, assessing architecture diagrams, data-flow diagrams, AI workflow designs, vendor/tool documentation, integration patterns, cloud/SaaS configurations, and product requirements to identify risks and recommend controls.
Advise on privacy and security control implementation, providing practical guidance on controls such as identity and access management, role-based access, data classification, encryption, retention and deletion, logging and monitoring, DLP, auditability, human oversight, and secure AI use.
Partner with project, data, AI, IT, and security teams to advise on compliant solution design, data use, vendor and tool use, confidentiality safeguards, and risk mitigations.
Support AI and privacy governance reviews by assessing AI use cases, data sources, platforms, vendors, model or tool behavior, prompt and output handling, and solution designs to identify risks and recommend practical solutions.
Build scalable governance frameworks, developing and maintaining playbooks, checklists, control libraries, standards, guidance materials, and reusable architecture/control patterns.
Promote awareness and responsible adoption through training and communication initiatives to help colleagues use AI and data responsibly while protecting client information and confidential data.

Requirements

7+ years of relevant experience in privacy engineering, AI governance, technology compliance, information security, cyber/privacy GRC, data protection, cloud governance, product compliance, legal/compliance operations with technical implementation exposure, or a related field.
Demonstrated technical fluency in modern technology environments, capable of reading and challenging architecture diagrams, data-flow diagrams, solution designs, system integration patterns, security/privacy control mappings, and vendor technical documentation.
Hands-on or implementation-adjacent experience with technical controls such as identity and access management, role-based access controls, data classification, encryption, logging and monitoring, DLP, retention/deletion, cloud/SaaS governance, secure SDLC, or AI tool governance.
Experience translating legal, regulatory, contractual, client confidentiality, or internal policy requirements into technical or operational controls.
Ability to advise senior stakeholders and influence cross-functional teams without direct reporting authority.
Strong analytical judgment and the ability to balance risk, business needs, user experience, and practical implementation.
Excellent communication skills, including the ability to explain complex compliance and technology concepts in plain language.
Ability to manage multiple priorities independently in a fast-moving, international environment.
Professional fluency in English.

Skills

Privacy engineering
AI governance
Technology compliance
Information security
Cyber/privacy GRC
Data protection
Cloud governance
Product compliance
Legal/compliance operations
Technical implementation
Identity and access management
Role-based access controls
Data classification
Encryption
Logging and monitoring
DLP
Retention and deletion
Cloud/SaaS governance
Secure SDLC
AI tool governance
Responsible AI
Generative AI governance
Machine learning governance
Model risk management
Security architecture
AI lifecycle controls
NIST AI RMF
NIST Privacy Framework
ISO 27001
SOC 2
CIS Controls
OWASP
OneTrust
ServiceNow GRC
Archer
Jira
Confluence
US privacy laws
Canadian privacy principles
GDPR concepts
Vendor risk management
Cross-border data considerations
Client confidentiality requirements

Location

Toronto, Canada

Work Type

Hybrid

Experience Level

Senior
7+ years

Education Level

Degree in Information Technology, Computer Science, Engineering, Information Security, Law, Compliance, or a related field; equivalent practical experience will also be considered.

Salary/Compensations

$140,000 to $170,000 CAD per year plus potential annual performance-based bonus.

Benefits

401(k) & RRSP benefits with company matching
Competitive suite of health benefits
Paid time off
13 paid holidays per year
Medical insurance
Basic life insurance

About the Company

Simon-Kucher is a global consultancy with over 2,200 employees in 30+ countries, focused on unlocking better growth for clients by optimizing product, pricing, innovation, marketing, sales, and digital strategies.
With over 40 years of experience in monetization, they are regarded as the world's leading commercial growth and pricing specialist.
They foster a unique entrepreneurial team culture, encouraging independent thinking and risk-taking.
The company invests in professional development and offers a values-driven culture with a vision to be the world's leading growth specialist.

Equal Opportunity

Simon-Kucher is an Equal Employment Opportunity (“EEO”) employer. Employment decisions are made without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran or military status, or any other legally protected status.
They believe in building a culture that embraces belonging, creating an environment where people feel valued, can be themselves, and feel their contribution matters.