Senior Privacy Analyst

Themis Solutions Inc.; Burnaby; Hybrid; CAD 106,000 - 144,000; Full time

Benefits offered by this job

Hybrid work environment

Top-tier health benefits

20 days off per year

Counseling benefit

RRSP matching and RESP contribution

Job summary

Clio is seeking a Senior Privacy Analyst to join its Compliance team in Canada. The role focuses on operating, maturing, and scaling a global privacy program, ensuring products and data handling meet GDPR, CCPA/CPRA, and PIPEDA standards across markets.

You will collaborate with Legal, Eng., Security, IT, and Finance to embed privacy by design. You will lead DPIAs/PIAs, develop training, monitor compliance, and advise on evolving privacy laws.

Qualifications

• Experience building and managing privacy programs across multiple jurisdictions.
• Ability to conduct DPIAs/PIAs and assess privacy risks in a tech/SaaS environment.
• Proven track record developing and implementing privacy policies, controls, and procedures.

Responsibilities

• Maintain and adapt the privacy program, policies, and internal knowledge base.
• Ensure privacy compliance across GDPR, CCPA/CPRA, and PIPEDA.
• Define and report on key privacy metrics.
• Conduct DPIAs/PIAs and LIAs for new products and processing activities.
• Develop privacy training and raise awareness across teams.

Skills

Privacy program

Risk assessments

DSAR workflows

Policy development

Cross-functional collaboration

Education

Bachelor's degree

Privacy certifications

Tools

Securiti.ai

TrustArc

Job description

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

Job Summary

We are currently seeking a Senior Privacy Analyst to join our Compliance team at Clio. Burnaby, Calgary, Toronto, Remote - Canada

Clio is seeking an experienced and motivated Senior Privacy Analyst to operate, mature, and scale our global privacy program. You will play a critical role in ensuring our products, processes, and data handling practices comply with international privacy regulations (GDPR, CCPA/CPRA, PIPEDA, Australia Privacy Act, etc.) and align with industry best practices. Working cross-functionally, you will embed privacy principles into our culture, procurement, product development lifecycle, and build trust with our customers.

Who you are

You are a highly organized and detail-oriented individual, capable of developing and managing privacy programs, policies, and procedures. Beyond writing policies, you understand that there is a need to effectively operationalize a privacy program through collaboration with internal departments that function as data controllers. You have refined your research skills and have a grasp on major global privacy regulations, such as GDPR, CCPA/CPRA, and PIPEDA. Conducting risk assessments like DPIAs and PIAs in a technology environment is a routine activity for you and approach it with a healthy curiosity. You prefer to be proactive, and don’t shy away from team-based development whether it involves leveling up your team members or leveling yourself through continued education.

What you’ll be doing

• Program Management & Automation: Maintain and adapt the company's privacy program, policies, procedures, and internal knowledge base as Clio continues to grow.
• Compliance Monitoring: Ensure compliance with applicable privacy laws and regulations in our existing markets (GDPR, CCPA/CPRA, PIPEDA), and others as they emerge.
• Metrics & Reporting: Define, track, and report on key privacy program metrics.
• Risk Assessment: Conduct and oversee Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and Legitimate Interests Assessments (LIAs) for new products, features, and processing activities.
• Policy & Training: Develop and update privacy training and awareness programs, including imparting a privacy forward mindset and coaching junior team members.
• Data Subject Rights: Participate in our DSAR pipeline, ensuring maintenance of coverage of all platforms in scope.
• Cross-Functional Collaboration: Partner closely with Legal, Engineering, Security, IT, Marketing, HR, and Sales teams to integrate Privacy by Design principles and conduct Privacy Threshold Assessments.
• Incident Response: Contribute to Business Continuity and Incident Response programs.
• Vendor Risk Management: Assist in the review and assessment of third-party vendor privacy practices and support the negotiation of Data Processing Agreements (DPAs).
• Stay Current: Monitor evolving privacy laws, regulations, enforcement trends, and best practices globally, advising the business on potential impacts and necessary changes.

Required Qualifications

• Bachelor's degree in a relevant field (e.g., Information Systems, Business, Public Policy) or equivalent practical experience.
• Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT) 5+ years of direct experience in privacy program management, data protection, or a closely related legal/compliance role.
• Demonstrated knowledge of major global privacy regulations (GDPR, CCPA/CPRA, PIPEDA required; familiarity with Privacy frameworks from ISO, NIST are a plus).
• Proven experience developing and implementing privacy policies, procedures, and controls.
• Experience conducting privacy risk assessments (DPIAs/PIAs).
• Experience managing DSAR workflows and tools.
• Strong program/project management skills with the ability to track and contribute to multiple projects simultaneously.
• Excellent communication (written and verbal) and interpersonal skills, with the ability to effectively collaborate with technical and non-technical teams.
• Experience working within a technology or SaaS company environment.
• Experience in leveraging AI to assess and mitigate privacy risks associated with internal AI processes and automated agents. Brings a focus to effective and measured data minimization and protection across diverse systems.

Preferred Qualifications

• Experience using privacy management software (e.g.,Securiti.ai, TrustArc).
• Candidates with experience in companies with SaaS delivery models preferred
• Familiarity with cloud computing environments (AWS, GCP) and SaaS architecture.
• Experience reviewing and negotiating Data Processing Agreements (DPAs).

What you will find here

The expected salary range for this role is $106,300 to $143,800 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

• Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
• Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
• Flexible time off policy, with an encouraged 20 days off per year.
• $2000 annual counseling benefit RRSP matching and RESP contribution
• Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply. Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Disclaimer

We only communicate with candidates through official @clio.com email addresses.

About Clio

Clio is on a mission to transform the legal experience for all. Clio is the global leader in legal AI, building the platform that powers the future of legal work. With the scale, data, and ambition to redefine how the legal industry operates, we are advancing a comprehensive strategy that spans the full lifecycle of legal work—from knowledge and insight to execution and outcomes. At the center of this vision is the Intelligent Legal Work Platform, the legal industry’s first System of Action. By combining Clio’s core product suite with Clio Work and AI-native capabilities, the platform turns information into insight and insight into action. As we expand into the enterprise, Clio for Enterprise extends this foundation to support the complexity, scale, and operational rigor of global organizations through solutions like Clio Operate and Vincent by Clio. Backed by industry-leading data and intelligence, Clio is building the infrastructure that enables legal teams to operate with greater speed, confidence, and impact. Clio’s leadership and momentum have been recognized globally. In 2022, we achieved Centaur status, a milestone reached by fewer than 200 private SaaS companies worldwide. We are a proud honoree of the Forbes Cloud 100 and Fortune’s Future 50, have been named Innovator of the Year, and are a Platinum Club member of Canada’s Best Managed Companies. We are consistently recognized as one of Canada’s Top 100 Employers and a Top Employer for Young People, with our international offices also earning placements on Great Place to Work’s Best Workplaces lists. Headquartered in Vancouver, Canada, Clio has grown to more than 2,000 employees across offices in Toronto, Calgary, Dublin, Manchester, Sydney, Barcelona, and Bogotá—bringing together diverse perspectives to solve one of the world’s most complex and impactful professional challenges.

Join Clio and help define the future of legal work through AI. Learn more at clio.com/careers.