Senior Manager, Information Compliance, AI Governance & Privacy

Simon-Kucher is hiring a Senior Manager, Information Compliance, AI Governance and Privacy into its Legal, Compliance and Risk function, on the Information Compliance Team. The role reports to the Head of Information Compliance with a dotted line to the Chief Compliance Officer, and works across AI compliance, information security, privacy and governance to protect client, company and personal data while enabling responsible technology adoption.

This is a senior individual contributor seat for a hybrid profile: privacy and AI governance expertise, legal and compliance judgment, and real technical fluency. You are not expected to be a full-time software engineer, but you do have to be credible in design discussions with data scientists, AI engineers, product owners, cloud and platform teams, IT, security and client project teams.

The company is explicit that this is not a policy-only compliance role. They want someone who gets close to the technology, understands how the systems actually work, and turns requirements into practical controls, implementation guidance and scalable governance patterns teams can actually use.

The work includes embedding AI governance and privacy into technology solutions from the start, translating privacy, AI governance, confidentiality, security and contractual requirements into technical controls and guardrails, reviewing architecture and data-flow diagrams, AI workflow designs and vendor documentation, advising on identity and access management, data classification, encryption, retention and deletion, logging and monitoring, DLP, auditability and human oversight, running AI and privacy governance reviews of use cases, models, vendors and prompt and output handling, and building the playbooks, control libraries and reusable patterns that make Privacy by Design and Responsible AI repeatable.

Simon-Kucher is a global consultancy of more than 2,200 people across 30-plus countries, focused on commercial growth, pricing and monetization.

The posted range for Toronto is CAD $140,000 to $170,000 per year plus a potential performance bonus, with paid time off, 13 paid holidays, medical insurance, basic life insurance and RRSP for eligible employees.

Qualifications

• 7+ years in privacy engineering, AI governance, technology compliance, information security, cyber or privacy GRC, data protection, cloud governance, product compliance, or legal and compliance operations with technical implementation exposure.
• Technical fluency in modern environments: able to read and challenge architecture diagrams, data-flow diagrams, solution designs, integration patterns, control mappings and vendor technical documentation.
• Hands-on or implementation-adjacent experience with identity and access management, role-based access control, data classification, encryption, logging and monitoring, DLP, retention and deletion, cloud and SaaS governance, secure SDLC, or AI tool governance.
• A track record of turning legal, regulatory, contractual or internal policy requirements into controls technology teams can actually implement.
• Ability to advise senior stakeholders and influence cross-functional teams without direct reporting authority.
• Degree in information technology, computer science, engineering, information security, law, compliance or a related field, or equivalent practical experience. Professional fluency in English.
• Preferred: familiarity with NIST AI RMF, the NIST Privacy Framework, ISO 27001, SOC 2, CIS Controls or OWASP.
• Preferred: AIGP, CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISM or CRISC.
• Preferred: OneTrust, ServiceNow GRC, Archer, Jira or Confluence, and experience in consulting, professional services, SaaS, financial services or healthcare.
• Preferred: familiarity with US state privacy laws, Canadian privacy principles, GDPR concepts, vendor risk and cross-border data considerations. German or another European language is a plus.