OUR COMPANY BACKGROUND & CULTURE
UPP is the first pension plan of its kind in Ontario’s university sector, proudly serving over 46,000 members across six universities and nineteen sector organizations. Our purpose is to bring greater retirement peace of mind to the university sector by investing with integrity and serving members with care. As a sector-wide plan designed for growth, our doors are open to all Ontario universities.
UPP is recognized as one of Greater Toronto’s Top Employers for 2026. Together, we’re a team of progressive thinkers and agile doers operating within a fast-paced culture of collaboration and respect. We believe in bringing smart and capable people together to create, solve, and grow with a clear shared vision and values of integrity, inclusivity, ingenuity, and impact.
Our culture is intentionally welcoming and purposefully rooted in equity, diversity, inclusion, and reconciliation (EDI&R). We believe diverse teams, perspectives, and lived experiences contribute to better decisions and a better workplace.
As a pension plan, UPP approaches investing through a long-term lens to generate and safeguard value. Our commitment to investing responsibly accounts for material risks that impact our investment portfolio to generate sufficient risk-adjusted returns to meet the pension needs of our members.
Join us in building a bright future for our members, our organization, and each other.
THE ROLE
Reporting to the Senior Legal Counsel, Technology, Privacy Officer, the Privacy Manager will be instrumental in advancing UPP’s privacy compliance framework. This role is central to ensuring that UPP not only meets but exceeds the expectations of UPP’s member and prospective universities, reinforcing UPP’s value proposition as a fit-for-purpose pension solution for Ontario’s higher education sector. By aligning with our stakeholders’ standards and fostering trust, this role directly contributes to UPP’s long-term strategic success.
In addition to stakeholder expectations, the Privacy Manager will help ensure UPP meets—and where possible, exceeds—the regulatory baselines established by our regulator, the Financial Services Regulatory Authority of Ontario (“FSRA”), as well as the standards set out by the Office of the Privacy Commissioner of Canada (“OPC”), and the privacy principles outlined in FIPPA and by the Information and Privacy Commissioner of Ontario (“IPC”). This includes day-to-day monitoring of compliance, auditing, privacy training for UPP’s internal business partners, and ensuring legal authority for all personal information processing is well-documented and defensible.
The ideal candidate is detail-oriented and thrives in a results-driven environment. They are a proactive “builder” who sees this role as an opportunity to take UPP’s privacy program to the next level and leave a meaningful mark. They are a self-starter with strong analytical and critical thinking skills, who brings curiosity, initiative, and a genuine interest in privacy and compliance. This is a role for someone who wants to build—and own—something that matters.
This role is based in downtown Toronto in a hybrid work environment, allowing employees the flexibility to work remotely and in-office (minimum two days per week in-office).
This posting is for an existing vacancy.
SPECIFIC ACCOUNTABILITIES
Privacy Compliance Monitoring & Auditing
- Lead day-to-day monitoring of privacy compliance across UPP, including PIPEDA or other applicable provincial legislation.
- Conduct, oversee, and/or facilitate periodic audits to assess adherence to UPP’s privacy policies, statements, and procedures.
- Develop and maintain compliance dashboards to track key metrics.
AI Governance and Support
- Lead the execution of AI Impact Assessments under UPP’s Employee Use of AI Framework.
- Own the development and updating AI governance processes and controls aligned with emerging legislation.
- Monitor AI regulatory developments and support organizational readiness and compliance.
Personal Information Management
- Maintain and monitor the uses of all PI at UPP.
- Establish and maintain tracking of the legal authority for PI processing, ensuring it is sufficiently documented and robust.
- Build and maintain a comprehensive PI data map across all of UPP’s operations (including third party vendors).
Policy Development & Implementation
- Proactively monitor relevant legislative developments in privacy, both in Ontario and abroad.
- Develop, update, and lead implementation of privacy policies and procedures in line with legislative requirements and best practices.
- Ensure policies are effectively communicated and implemented across the organization.
Training & Awareness
- Develop and deliver ongoing privacy training and awareness sessions to staff.
- Promote a culture of privacy through ongoing engagement with employees.
- Develop and maintain a privacy partner program to embed privacy considerations in UPP’s business operations.
Privacy Impact Assessments (PIAs)
- Conduct and document PIAs for new projects, initiatives, or systems involving PI.
- Proactively update PIAs as a “living document”.
- Work collaboratively with departments to assess and mitigate privacy risks.
Incident Management
- Lead the management and investigation of privacy incidents and breaches.
- Maintain a breach response protocol, breach log, and notification workflows.
- Investigate privacy breaches at UPP to make recommendation on regulatory notifications to the General Counsel and Privacy Officer.
Regulatory Engagement
- Serve as a liaison with privacy regulators and oversee compliance reporting.
- Stay informed about changes in privacy legislation and ensure UPP's practices remain compliant.
QUALIFICATIONS & EXPERIENCE
- Bachelor’s degree in legal studies, Business, Computer Science, Public Policy or a degree with coursework in privacy, data protection, cybersecurity, or related field.
- Minimum of 3 years of experience in a privacy, compliance, or data governance role.
- Experience conducting PIAs, managing privacy training programs, and monitoring compliance with internal policies.
- Familiarity with privacy legislation including PIPEDA, FIPPA, and emerging privacy frameworks.
- CIPP/C or other CIPP qualification is an asset.
ATTRIBUTES
- A nimble, resourceful team player.
- Strong analytical and critical thinking skills.
- Highly organized, with exceptional attention to detail.
- Excellent communication and interpersonal abilities.
- Comfortable working independently and collaboratively across departments.
- Demonstrated initiative and interest in evolving privacy and compliance landscapes.
- Able to build positive relationships within the UPP and with external stakeholders.
- A proven track record of a proactive “ownership mindset” evident through responsibility and accountability.
- Demonstrated ability to meet high performance standards and maintain a calm, pleasant demeanor in a fast-paced, deadline-driven environment.
- A highly professional video, telephone, and email presence.
- Handles confidential information with discretion.
EXPECTED COMPENSATION
The expected compensation for this role is an annualized base salary in the range of $85,600 to $135,600. This range reflects the expected range for new hire base salaries and is subject to change and may be modified in the future.
You may also be eligible for a variable incentive depending on organizational, divisional and personal performance. The final total compensation offered will vary depending on your skills, experience and other factors.
LIFE AT UPP
Do work that matters. We are duty-bound to serve our members’ interests, and it’s a responsibility we don’t take lightly. That’s why we’ve ingrained sustainability in our work from day one—to ensure our members have a resilient future to retire into, both today and for generations to come.
Stronger together. Collaboration is how UPP was born, and it’s how we work with each other and our partners day in, day out. No one at UPP is just a number (even if they are excellent at math) and every win is a shared win.
Grow every day. You’ll have the opportunity to work on unique, once-in-a-career projects that maximize your skill set and probably teach you some new ones—at any stage in your career.
Prioritize wellness. At UPP, wellness takes many forms. Ultimately, it’s about ensuring our people are cared for in the ways that matter to them. Check out some highlights of our inclusive employee-focused benefits program including:
- Defined benefit pension plan
- Flexible hybrid work model
- Paid time off – vacations, personal days and wellness days
- Work remotely up to eight weeks/year
- Comprehensive group benefits including medical, dental, vision, etc.
- Extended paramedical and mental health service coverage
- Health care and lifestyle spending accounts
- Fertility treatments, paid parental leave, and gender affirmation coverage
- Education Assistance program
This posting will remain open for a minimum of seven (7) days and will remain open until a sufficient number of qualified applications are received or finalist candidates have been identified.
Artificial intelligence (AI) tools may be used to support certain stages of the recruitment process, including sourcing, screening, and assessment. All hiring decisions involve human review and intervention by UPP employees.
UPP enthusiastically welcomes applications from all qualified applicants and especially invites people with lived experience as an Indigenous person, a person with a disability or as a member of another Human Rights Code protected group that faces barriers to employment to apply. Our goal is to create a barrier-free experience for every candidate throughout the recruitment process.
UPP respects your privacy. For information on how UPP handles the personal information you provide during the application process, please see our Job Applicant Privacy Statement.
