Manager, Privacy & Regulatory Compliance

The role

This individual contributor will lead and scale the privacy program and help the business adopt AI and automation responsibly. You will provide privacy guidance, conduct assessments, and support the Enterprise Risk Management framework.

What you will do

• Lead and continuously improve the privacy program.
• Provide practical privacy guidance to the business.
• Lead privacy assessments for new products, features, vendors, and data uses.
• Help shape the approach to responsible AI.
• Embed privacy by design into operations.
• Manage core privacy operations including data rights requests and privacy incidents.
• Monitor emerging privacy, data, and AI developments in Canada and the United States.
• Support the rollout and implementation of the Enterprise Risk Management framework.
• Support regulatory change and third-party risk activities.
• Provide flexible support across the broader regulatory compliance program.

Required qualifications

• 3–6+ years of hands-on privacy experience, ideally within fintech, payments, technology, banking, financial services, or another regulated environment.
• Strong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25, with familiarity with Alberta and British Columbia privacy legislation.
• Practical experience conducting Privacy Impact Assessments, privacy reviews, data rights requests, and privacy incident or breach assessments.
• The judgment to apply privacy requirements proportionately.
• Genuine curiosity about AI and emerging technologies.
• An ability to simplify complex requirements and create clear guidance, decision frameworks, and processes.
• A practical, action-oriented mindset.
• Strong written and verbal communication skills.
• The ability to independently manage competing priorities and exercise sound judgment.

Nice to have

• Experience reviewing AI tools, automated processing, emerging technologies, or data-governance matters
• Familiarity with U.S. privacy frameworks, including CCPA/CPRA and emerging state privacy laws
• Exposure to enterprise risk management, third-party risk, fintech regulation, payments compliance, or AML/ATF
• CIPP/C certification
• CIPP/US, CIPM, or other relevant privacy certifications
• Bilingualism in English and French

About the company

Plooto is a payment automation platform built to help accountants, bookkeepers, and their clients take control of their payables and receivables. The company has a strong footprint among accounting firms and bookkeeping professionals across Canada.