Senior Manager, Risk & Compliance

Osler, Hoskin & Harcourt LLP is one of Canada’s leading business law firms. Advising many of Canada’s corporate leaders, as well as U.S. and international parties with extensive interest in Canada, our more than 1,000 firm members are based in offices in Toronto, Montréal, Ottawa, Vancouver, Calgary and New York.

Osler prides itself on attracting and maintaining some of the brightest talent in the legal arena. Our lawyers, students, management and staff have created a unique firm culture which nurtures mentoring and the exchange of ideas. Osler is a dynamic and exciting place to further your career or carve out a new path.

Reporting to the Director, Conflicts & Risk Management, the Senior Manager, Risk and Compliance is responsible for managing the Firm’s national risk management processes, systems and activities (with an emphasis on compliance). This includes managing the Outside Counsel Guidelines (OCGs) process, managing the client questionnaire process, responding to regulatory requests for information, administering our annual national quality assurance program, and leading the Firm’s Risk Analysts who support the Firm’s risk management processes.

Responsible for privacy compliance by supporting internal teams, processes, and initiatives to ensure adherence to applicable privacy laws, regulations, and industry standards. This role will also act as the primary operational lead for the Firm’s privacy program, working closely with the General Counsel’s Office (GCO) and the Chief Privacy Officer, as required, for legal guidance and support.

Proactively identifies and leads implementation and testing of process improvements and best practices for the technology supporting the Firm’s risk related processes.

This job posting is for an existing vacancy.

• Responsible for the management of the daily operation of the Risk Analysts, manage the team to meet deadlines and achieve desired results. Responsible for determining staffing levels, workflow coordination to ensure requests are handled expeditiously and accurately.
• Manage the Firm’s Outside Counsel Guidelines (OCG) program and the administration of the Firm’s Intapp Terms system.
• Manage the administration of responses to client anti-corruption, due diligence and compliance questionnaires.
• Manage and respond to Regulatory requests for information ensuring responses are accurate and comply with applicable privacy laws.
• Serve as the first line privacy compliance SME for the Firm’s OCG review process, ensuring that privacy-related obligations in client guidelines are identified, assessed, and addressed appropriately.
• Act as the first-line privacy SME for the Firm’s vendor contracting processes and assist with the preparation of privacy impact assessments.
• Assist with the development, implementation, and maintenance of the Firm’s internal privacy compliance program, ensuring alignment with applicable privacy laws and regulations, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA), provincial privacy laws (e.g., Quebec’s Bill 64), and international frameworks (e.g., GDPR, CCPA, etc.).
• Foster a culture of privacy awareness across the Firm by promoting the importance of privacy compliance and ethical data handling practices.
• Manage the Firm’s Annual Quality Assurance program.
• Is a key participant in meetings of the Ethics & Conflicts Committee, tracking issues and action items, managing meetings, and circulating meeting minutes.
• Provide second level support and guidance to legal professionals, legal assistants and administrative departments regarding risk related policies, procedures and best practices.
• Prepare and participate in risk presentations to lawyers and assistants on aspects of risk related policies and procedures.
• Train Team members and Firm members on risk related technology systems and related processes.
• Identify issues, recommend and implement processes and solutions that support compliance with regulatory requirements, rules of professional conduct, and Firm policies.
• Document procedures and maintain the integrity of information including, OCG operational playbooks; recommend and…