Manager, Privacy & Regulatory Compliance

About This Opportunity

We are representing a confidential Canadian fintech organization in their search for a Manager, Privacy & Regulatory Compliance. Our client operates a payment automation platform serving accountants, bookkeepers, finance teams, and their clients across Canada.

This is a hands-on role focused primarily on leading and scaling the privacy program while helping the business adopt AI and data-driven technologies responsibly. You'll serve as a key privacy subject-matter expert, working across Product, Engineering, Security, Legal, and Operations teams to translate complex requirements into practical solutions.

The role also provides flexible support for enterprise risk management and broader regulatory compliance initiatives as business needs evolve. This reports to senior compliance leadership within the Payments Strategy & Compliance function.

Responsibilities

• Lead and continuously improve the privacy program, ensuring compliance with PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and other applicable privacy requirements
• Provide practical privacy guidance to stakeholders, translating regulatory requirements into clear, risk-based actions without creating unnecessary friction
• Conduct privacy assessments for new products, features, vendors, and data uses, including Privacy Impact Assessments, applying a proportionate approach based on actual risk
• Develop the organization's approach to responsible AI, creating scalable methods for assessing AI tools and use cases across privacy, data use, transparency, retention, access, and automated decision-making
• Embed privacy by design principles, partnering early with cross-functional teams on development and implementation of new products, AI tools, vendors, and automated processes
• Manage core privacy operations including data rights requests, privacy incidents and breach assessments, third-party privacy reviews, cross-border data considerations, and data retention practices
• Monitor emerging privacy, data, and AI developments in Canada and the United States, converting relevant developments into actionable recommendations
• Support rollout and implementation of the Enterprise Risk Management framework, including coordinating risk assessments, maintaining the risk register, and supporting risk reporting
• Provide support across the broader regulatory compliance program, including regulatory initiatives, audits, effectiveness reviews, and obligations under Canadian payments and AML/ATF legislation
• Build organizational understanding through clear guidance, practical tools, and training on privacy, responsible AI, and risk management

What We're Looking For

• 3–6+ years of hands-on privacy experience, ideally within fintech, payments, technology, banking, financial services, or another regulated environment
• Strong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25, with familiarity with Alberta and British Columbia privacy legislation
• Practical experience conducting Privacy Impact Assessments, privacy reviews, data rights requests, and privacy incident or breach assessments
• Judgment to apply privacy requirements proportionately and develop controls that are defensible, practical, and appropriate to underlying risk
• Genuine curiosity about AI and emerging technologies, with interest in learning how new tools use data and helping navigate evolving privacy and governance considerations
• Ability to simplify complex requirements and create clear guidance, decision frameworks, and processes that people will actually use
• Practical, action-oriented mindset, comfortable building structure where needed while avoiding unnecessary bureaucracy
• Strong written and verbal communication skills, with confidence to work collaboratively across Product, Engineering, Security, People, Operations, Legal, and leadership teams
• Ability to independently manage competing priorities, exercise sound judgment, and recognize when issues require escalation
• CIPP/C certification preferred; CIPP/US, CIPM, or other relevant privacy certifications are assets
• Familiarity with U.S. privacy frameworks including CCPA/CPRA and emerging state privacy laws is an asset
• Exposure to enterprise risk management, third-party risk, fintech regulation, payments compliance, or AML/ATF is helpful but not required
• Bilingualism in English and French is an asset given Canadian regulatory obligations

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will review your application and conduct an initial screening call to understand your experience and interest in this opportunity. Qualified candidates are then submitted to our client for consideration. Please do not attempt to contact the client directly, as all communication must flow through Get A Job.ai to ensure a professional and coordinated process.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive recruitment practices. We encourage applications from candidates of all backgrounds and experiences. Accommodation is available throughout the recruitment process upon request.