Privacy & Regulatory Compliance Lead

OpenKrill; United States; À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

Plooto is seeking a Manager, Privacy & Regulatory Compliance to lead and scale its privacy program while responsibly adopting AI and data‑driven technologies. This hands‑on role focuses on privacy governance, risk assessment, and practical controls across Canada and the United States.

You’ll work with Product, Engineering, Security, Legal, People, and Operations to translate complex requirements into actionable solutions, support ERM, and guide regulatory compliance initiatives.

Qualifications

• 3–6+ years of hands-on privacy experience in fintech, payments, or regulated environments.
• Strong knowledge of Canadian privacy requirements (PIPEDA, Quebec Law 25).
• Experience with Privacy Impact Assessments and data rights requests.
• Ability to apply privacy requirements proportionately and provide practical controls.
• Genuine curiosity about AI and emerging technologies with governance interest.
• Ability to simplify complex requirements and provide clear guidance.
• Bilingualism in English and French is an asset.

Responsabilités

• Lead and continuously improve privacy program, serving as primary privacy expert and supporting compliance with PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and other privacy requirements.
• Provide practical privacy guidance translating legal requirements into actionable steps without excessive documentation or approvals.
• Lead privacy assessments for new products, features, vendors, and data uses with a proportionate review.
• Shape Plooto’s approach to responsible AI with scalable methods for evaluating AI tools and data use.
• Embed privacy by design with Product, Engineering, Security, and other teams early in development.
• Manage core privacy operations: data rights requests, privacy incidents, third‑party reviews, cross‑border data considerations, retention and deletion.
• Monitor emerging privacy and AI developments in Canada/US; translate to actionable recommendations.
• Support the ERP/ERM rollout: risk assessments, risk register, mitigations, reporting.
• Support regulatory change and third‑party risk activities and track implementation of controls.
• Provide training and guidance across privacy, responsible AI, and risk management.

Connaissances

Privacy

PIAs

AI governance

Risk management

Regulatory compliance

Communication

Formation

CIPP/C certification preferred

Description du poste

Plooto is seeking a Manager, Privacy & Regulatory Compliance to lead and scale its privacy program while responsibly adopting AI and data‑driven technologies. This hands‑on role focuses on privacy governance, risk assessment, and practical controls across Canada and the United States.

You’ll work with Product, Engineering, Security, Legal, People, and Operations to translate complex requirements into actionable solutions, support ERM, and guide regulatory compliance initiatives.