Privacy & AI Regulatory Compliance Lead

Logoslabs; San Francisco (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

Plooto is seeking a Manager, Privacy & Regulatory Compliance to lead and scale our privacy program while helping the business adopt AI responsibly. This hands‑on role focuses on privacy expertise, ERM integration, and practical, risk‑based governance across Canada and the United States.

You will collaborate with Product, Engineering, Security, Legal, and Operations, translating complex requirements into actionable controls and scalable processes to enable rapid, responsible innovation.

Qualifications

• 3–6+ years hands-on privacy experience in fintech or regulated environments.
• Strong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25, with familiarity with Alberta and British Columbia privacy legislation.
• Practical experience conducting Privacy Impact Assessments, privacy reviews, data rights requests, and privacy incident or breach assessments.
• The judgment to apply privacy requirements proportionately and develop controls that are defensible, practical, and appropriate to the underlying risk.
• Genuine curiosity about AI and emerging technologies, including an interest in learning how new tools use data and helping the organization navigate evolving privacy and governance considerations.
• Ability to simplify complex requirements into clear guidance, decision frameworks, and processes that people will actually use.

Responsibilities

• Lead and continuously improve Plooto’s privacy program, serving as a primary privacy subject‑matter expert and supporting compliance with privacy laws.
• Provide practical privacy guidance to the business, translating legal and regulatory requirements into clear, risk‑based actions without creating unnecessary documentation or friction.
• Lead privacy assessments for new products, features, vendors, and data uses, including Privacy Impact Assessments.
• Help shape Plooto’s approach to responsible AI, developing scalable methods for assessing AI tools and use cases across privacy, data use, transparency, retention, access, automated decision‑making, and third‑party processing.
• Embed privacy by design into how Plooto operates, partnering with Product, Engineering, Security, People, and other teams early in development and implementation.
• Manage core privacy operations, including data rights requests, privacy incidents and breach assessments, third‑party privacy reviews, cross‑border data considerations, and data retention and deletion practices.
• Monitor emerging privacy, data, and AI developments in Canada and the United States, determine relevance, and translate into actionable recommendations.
• Support the rollout and ongoing implementation of Plooto’s Enterprise Risk Management framework, including coordinating risk assessments and reporting.
• Help make risk management a practical business discipline with clear ownership and meaningful reporting.
• Support regulatory change and third‑party risk activities and broader regulatory compliance program.

Skills

Privacy knowledge

Regulatory compliance

Communication skills

Project management

Analytical mindset

Job description

Plooto is seeking a Manager, Privacy & Regulatory Compliance to lead and scale our privacy program while helping the business adopt AI responsibly. This hands‑on role focuses on privacy expertise, ERM integration, and practical, risk‑based governance across Canada and the United States.

You will collaborate with Product, Engineering, Security, Legal, and Operations, translating complex requirements into actionable controls and scalable processes to enable rapid, responsible innovation.