Senior Privacy Analyst

Clio; Toronto; On-site; CAD 106,000 - 144,000; Full time

Benefits offered by this job

Hybrid work environment

Flexible time off

Counseling benefit

RRSP matching

Clioversary program

Job summary

Clio is hiring a Senior Privacy Analyst to operate, mature, and scale our global privacy program across GDPR, CCPA/CPRA, and PIPEDA. You will partner with Legal, Engineering, Security, IT, Marketing, HR, and Sales to embed Privacy by Design in product development and procurement.

You’ll lead DPIAs/PIAs, DSAR workflows, and vendor privacy reviews in a dynamic SaaS environment. You will help drive a privacy-forward culture, stay current with evolving laws, and empower teams to minimize data across

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT).
• 5+ years in privacy program management, data protection, or a closely related role.
• Knowledge of GDPR, CCPA/CPRA, PIPEDA; ISO/NIST familiarity is a plus.
• Experience conducting DPIAs/PIAs and managing DSAR workflows.

Responsibilities

• Program Management & Automation: Maintain and adapt the privacy program, policies, and internal knowledge base.
• Compliance Monitoring: Ensure privacy law compliance in existing markets (GDPR, CCPA/CPRA, PIPEDA).
• Metrics & Reporting: Define, track, and report key privacy metrics.
• Risk Assessment: Conduct DPIAs, PIAs, LIAs for new products and processing activities.
• Policy & Training: Develop privacy training and foster a privacy-forward culture.
• Data Subject Rights: Oversee DSAR pipeline across platforms.
• Cross-Functional Collaboration: Work with Legal, Engineering, Security, IT, Marketing, HR, Sales.
• Incident Response: Contribute to BCP and IR programs.
• Vendor Risk Management: Review DPAs and vendor privacy practices.
• Stay Current: Monitor evolving privacy laws and advise on changes.

Skills

Privacy program management

Data protection

Regulatory compliance

DSAR workflows

DPIAs/PIAs

Policy development

Cross-functional collaboration

AI privacy risk assessment

Data minimization

Education

Bachelor's degree in Information Systems / Business / Public Policy

Privacy certifications (CIPP/US, CIPP/E, CIPM, CIPT)

Tools

Securiti.ai

TrustArc

Job description

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.

We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice.

Summary:

We are currently seeking a Senior Privacy Analyst to join our Compliance team at Clio. Burnaby, Calgary, Toronto, Remote - Canada

Job Summary:

Clio is seeking an experienced and motivated Senior Privacy Analyst to operate, mature, and scale our global privacy program. You will play a critical role in ensuring our products, processes, and data handling practices comply with international privacy regulations (GDPR, CCPA/CPRA, PIPEDA, Australia Privacy Act, etc.) and align with industry best practices. Working cross-functionally, you will embed privacy principles into our culture, procurement, product development lifecycle, and build trust with our customers.

Who you are:

You are a highly organized and detail-oriented individual, capable of developing and managing privacy programs, policies, and procedures. Beyond writing policies, you understand that there is a need to effectively operationalize a privacy program through collaboration with internal departments that function as data controllers. You have refined your research skills and have a grasp on major global privacy regulations, such as GDPR, CCPA/CPRA, and PIPEDA. Conducting risk assessments like DPIAs and PIAs in a technology environment is a routine activity for you and approach it with a healthy curiosity. You prefer to be proactive, and don’t shy away from team-based development whether it involves leveling up your team members or leveling yourself through continued education.

What you’ll be doing:

• Program Management & Automation: Maintain and adapt the company's privacy program, policies, procedures, and internal knowledge base as Clio continues to grow.
• Compliance Monitoring: Ensure compliance with applicable privacy laws and regulations in our existing markets (GDPR, CCPA/CPRA, PIPEDA), and others as they emerge.
• Metrics & Reporting: Define, track, and report on key privacy program metrics.
• Risk Assessment: Conduct and oversee Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and Legitimate Interests Assessments (LIAs) for new products, features, and processing activities.
• Policy & Training: Develop and update privacy training and awareness programs, including imparting a privacy forward mindset and coaching junior team members.
• Data Subject Rights: Participate in our DSAR pipeline, ensuring maintenance of coverage of all platforms in scope.
• Cross-Functional Collaboration: Partner closely with Legal, Engineering, Security, IT, Marketing, HR, and Sales teams to integrate Privacy by Design principles and conduct Privacy Threshold Assessments.
• Incident Response: Contribute to Business Continuity and Incident Response programs.
• Vendor Risk Management: Assist in the review and assessment of third-party vendor privacy practices and support the negotiation of Data Processing Agreements (DPAs).
• Stay Current: Monitor evolving privacy laws, regulations, enforcement trends, and best practices globally, advising the business on potential impacts and necessary changes.

Required Qualifications:

• Bachelor's degree in a relevant field (e.g., Information Systems, Business, Public Policy) or equivalent practical experience.
• Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT)
• 5+ years of direct experience in privacy program management, data protection, or a closely related legal/compliance role.
• Demonstrated knowledge of major global privacy regulations (GDPR, CCPA/CPRA, PIPEDA required; familiarity with Privacy frameworks from ISO, NIST are a plus).
• Proven experience developing and implementing privacy policies, procedures, and controls.
• Experience conducting privacy risk assessments (DPIAs/PIAs).
• Experience managing DSAR workflows and tools.
• Strong program/project management skills with the ability to track and contribute to multiple projects simultaneously.
• Excellent communication (written and verbal) and interpersonal skills, with the ability to effectively collaborate with technical and non-technical teams.
• Experience working within a technology or SaaS company environment.
• Experience in leveraging AI to assess and mitigate privacy risks associated with internal AI processes and automated agents.
• Brings a focus to effective and measured data minimization and protection across diverse systems.

Preferred Qualifications:

• Experience using privacy management software (e.g.,Securiti.ai, TrustArc).
• Candidates with experience in companies with SaaS delivery models preferred
• Familiarity with cloud computing environments (AWS, GCP) and SaaS architecture.
• Experience reviewing and negotiating Data Processing Agreements (DPAs).

This is a new role.

What you will find here:

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.

Some highlights of our Total Rewards program include:

• Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
• Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week.
• Flexible time off policy, with an encouraged 20 days off per year.
• $2000 annual counseling benefit
• RRSP matching and RESP contribution
• Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

The expected salary range for this role is $106,300 to $143,800 CAD. Initial placement within the range is informed by geographic region, experience, and skillset, with room to progress as impact and tenure grow. Final offer amounts will vary based on candidate profile.

Diversity, Inclusion, Belonging and Equity (DIBE) & Accessibility

Our team shows up as their authentic selves, and are united by our mission. We are dedicated to diversity, equity and inclusion. We pride ourselves in building and fostering an environment where our teams feel included, valued, and enabled to do the best work of their careers, wherever they choose to log in from. We believe that different perspectives, skills, backgrounds, and experiences result in higher-performing teams and better innovation. We are committed to equal employment and we encourage candidates from all backgrounds to apply.

Clio provides accessibility accommodations during the recruitment process. Should you require any accommodation, please let us know and we will work with you to meet your needs.

Learn more about our culture at clio.com/careers

We're a Human and High Performing AI company, meaning we use artificial intelligence to improve all of our operations. In recruitment, AI helps us streamline the process for greater efficiency. However, we've built our systems to ensure that a human always reviews AI-generated output, and we never make automated hiring decisions.

Disclaimer: We only communicate with candidates through official @clio.com email addresses.