Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Privacy Specialist role.
Rezi rewrites your resume against BDO's job description. Free.
Tailor your resume to this Privacy Specialist role.
Rezi rewrites your resume against BDO's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Privacy Specialist posting at BDO — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Privacy Specialist posting at BDO — free, in seconds.
About the Role
BDO Canada’s Legal Department is seeking a Privacy Specialist to support the firm’s Privacy Office. This role will assist in the day-to-day operations and ongoing development of BDO’s privacy program, focusing on areas such as privacy impact assessments, data mapping, incident response, and vendor reviews. The specialist will also support initiatives involving digital tools, AI, and data analytics, ensuring privacy risks are understood and managed.
Responsibilities
- Support the operation of BDO’s privacy program by coordinating intake, follow-up, documentation and metrics.
- Help develop and update policies, procedures, templates, training and awareness materials.
- Identify and document personal information flows across systems, processes, service lines, and vendors.
- Conduct and support Privacy Impact Assessments, DPIAs where applicable, and reviews for digital tools, analytics initiatives, service line projects, internal processes, and new uses of personal information.
- Help teams apply privacy-by-design principles and reduce risk through data minimization, access controls, retention, transparency, consent, de-identification, vendor controls, and appropriate use limitations.
- Assist with privacy incident response, including information gathering, documentation, containment and remediation, breach assessment, and stakeholder follow-up.
- Support vendor, technology, and cross-border privacy reviews by assessing data flows, vendor practices, security and privacy documentation, data processing arrangements, transfer risks, and transfer impact assessments.
- Monitor Canadian and global developments in privacy, data protection, AI, and related regulation, translating developments into practical updates to BDO's program.
- Respond to internal privacy inquiries with practical guidance aligned with BDO policies and applicable requirements.
Requirements
- Four to six years of relevant experience in privacy, data protection, compliance, technology governance, or a related field; candidates with at least three years of direct privacy experience may also be considered.
- Experience developing, operating, or improving a privacy program in a complex organization.
- Strong working knowledge of Canadian privacy laws, including PIPEDA and provincial legislation such as Quebec's Law 25, with strong research skills to monitor developments in Canada and other relevant jurisdictions.
- Experience conducting or supporting Privacy Impact Assessments, privacy reviews, data mapping, or similar risk assessments; DPIA experience is an asset.
- Experience documenting personal information flows, including collection, use, disclosure, storage, retention, access, vendor involvement, and cross-border processing.
- Experience supporting privacy incident response, breach documentation, privacy inquiries, or access and deletion requests.
- Ability to translate privacy requirements into practical, business-facing guidance and clear next steps.
- Strong communication, sound judgment, attention to detail, and the ability to manage competing priorities.
- Understanding of privacy-by-design principles, including data minimization, transparency, consent, retention, access controls, and appropriate use limitations.
- Familiarity with GDPR, CCPA/CPRA, cross-border data transfers, data processing agreements, transfer impact assessments, AI-enabled solutions, data analytics, cloud tools, information security concepts, and privacy terms in vendor, technology, or commercial agreements is an asset.
- An IAPP certification such as CIPP/C, CIPM, or CIPT is also an asset.
Skills
- Privacy Impact Assessments
- Data Mapping
- Privacy Incident Response
- Vendor Reviews
- Digital Tools
- AI
- Data Analytics
- Privacy-by-Design
- PIPEDA
- Quebec Law 25
- GDPR
- CCPA/CPRA
- Data Processing Agreements
- Transfer Impact Assessments
- Information Security Concepts
Location
- Canada
Work Type
- Hybrid
Experience Level
- Mid-level
Salary/Compensations
- $90,000-$110,000 annually
Benefits
- Competitive total cash compensation
- Comprehensive benefits from day one
- Flexible personal time off policy
- Reimbursement for wellness initiatives
About the Company
- BDO is a firm built on a foundation of positive relationships with our people and our clients.
- Professionals provide exceptional service, helping clients with advice and insight they can trust.
- Offers an award-winning environment that fosters a people-first culture with a high priority on personal and professional growth.
- People-first approach to talent has earned a spot among Canada’s Top 100 Employers for 2026.
- People experience is guided by three core pillars—Do work with genuine care, Do what matters with purpose, and Do what’s next.
- Firm is committed to providing an environment where you can be successful.
- Enables engagement with how the firm changes and evolves, being a key contributor to the success and growth of BDO in Canada.
- Helps professionals become better within services, industries, and markets with extensive opportunities for learning and development.
- Supports achievement of personal goals outside of the office and making an impact on the community.
- Fosters a collaborative, inclusive environment where ideas are valued.
- Encourages innovation and forward thinking, empowering professionals to embrace what’s next and help shape the future of the firm.
- Actively involved in communities by supporting local charity initiatives.
- Supports staff with local and national events where there is an opportunity to contribute to the community.
- Code of Conduct sets clear standards for how business is conducted, reflecting shared values and commitments, and includes guiding principles to help make ethical decisions and maintain trust.
Equal Opportunity
- Committed to creating a workplace where employees can participate fully, contribute meaningfully and succeed without barriers.
- Dedicated to fostering a workplace defined by respect, fairness, and a true sense of belonging for everyone.
- Recognizes and celebrates the unique experiences, identities, and perspectives that each person brings.
- Ensures that the application process is both inclusive and accessible.
- If accommodation is required to complete the application process, please contact us.