Plooto - Manager, Privacy & Regulatory Compliance
Requirements
• 3–6+ years of hands-on privacy experience, ideally within fintech, payments, technology, banking, financial services, or another regulated environment. • 3–6+ years of hands-on privacy experience • Strong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25, with familiarity with Alberta and British Columbia privacy legislation. • PIPEDA and Quebec Law 25 • Practical experience conducting Privacy Impact Assessments, privacy reviews, data rights requests, and privacy incident or breach assessments. • The judgment to apply privacy requirements proportionately and develop controls that are defensible, practical, and appropriate to the underlying risk. • Genuine curiosity about AI and emerging technologies, including an interest in learning how new tools use data and helping the organization navigate evolving privacy and governance considerations. • AI and emerging technologies • You do not need extensive AI governance experience. Experience reviewing AI tools, automated processing, emerging technologies, or data-governance matters is an asset. • An ability to simplify complex requirements and create clear guidance, decision frameworks, and processes that people will actually use. • A practical, action-oriented mindset. You are comfortable building structure where it is needed while avoiding bureaucracy that does not meaningfully reduce risk. • Strong written and verbal communication skills, with the confidence to work collaboratively across Product, Engineering, Security, People, Operations, Legal, and leadership teams. • The ability to independently manage competing priorities, exercise sound judgment, and recognize when an issue requires escalation. • Familiarity with U.S. privacy frameworks, including CCPA/CPRA and emerging state privacy laws, is an asset. • Exposure to enterprise risk management, third-party risk, fintech regulation, payments compliance, or AML/ATF is helpful but not required. You should be curious and willing to build knowledge in these areas with the support of the broader Compliance team. • CIPP/C certification is preferred. CIPP/US, CIPM, or other relevant privacy certifications are assets. • CIPP/C • Bilingualism in English and French is an asset given Plooto’s Canadian regulatory obligations. • English and French
Responsibilities
• Lead and continuously improve Plooto’s privacy program, serving as a primary privacy subject-matter expert and supporting compliance with PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and other applicable privacy requirements. • Lead and continuously improve Plooto’s privacy program • Provide practical privacy guidance to the business, translating legal and regulatory requirements into clear, risk-based actions without creating unnecessary documentation, approvals, or operational friction. • Provide practical privacy guidance to the business • Lead privacy assessments for new products, features, vendors, and data uses, including Privacy Impact Assessments. Apply a proportionate approach so the depth of review and documentation reflects the actual level of risk. • Lead privacy assessments for new products, features, vendors, and data uses • Help shape Plooto’s approach to responsible AI, developing lightweight, scalable methods for assessing AI tools and use cases across privacy, data use, transparency, retention, access, automated decision-making, and third-party processing. • Help shape Plooto’s approach to responsible AI • Embed privacy by design into how Plooto operates, partnering with Product, Engineering, Security, People, and other teams early in the development and implementation of new products, AI tools, models, vendors, and automated processes. • Embed privacy by design into how Plooto operates • Manage core privacy operations, including data rights requests, privacy incidents and breach assessments, third-party privacy reviews, cross-border data considerations, and data retention and deletion practices. • Manage core privacy operations • Monitor emerging privacy, data, and AI developments in Canada and the United States, determine which developments are relevant to Plooto, and convert them into focused, actionable recommendations. • Monitor emerging privacy, data, and AI developments • Support the rollout and ongoing implementation of Plooto’s Enterprise Risk Management framework, including coordinating risk assessments, maintaining the enterprise risk register, monitoring mitigation activities, and supporting risk reporting. • Support the rollout and ongoing implementation of Plooto’s Enterprise Risk Management framework • Help make risk management a practical business discipline, working with leaders to identify material risks, clarify ownership, track meaningful actions, and maintain reporting that supports decision-making rather than documentation for its own sake. • Help make risk management a practical business discipline • Support regulatory change and third-party risk activities, helping assess new requirements and higher-risk relationships, identify accountable owners, and track implementation of proportionate controls. • Support regulatory change and third-party risk activities • Provide flexible support across Plooto’s broader regulatory compliance program, including regulatory initiatives, audits, effectiveness reviews, remediation work, obligations under the Retail Payment Activities Act, and AML/ATF requirements under the PCMLTFA and FINTRAC guidance. • Provide flexible support across Plooto’s broader regulatory compliance program • Build understanding and accountability across the organization through clear guidance, practical tools, and training on privacy, responsible AI, and risk management. • Build understanding and accountability across the organization
Benefits
• If you’re looking to make a meaningful impact, look no further. We’re transforming the payments space in North America by delivering an unrivalled product experience that solves a real and pressing problem for SMBs. • One of the biggest challenges small businesses face is managing their finances and cash flow—and Plooto helps address that. We have strong product-market fit, a significant opportunity ahead, and the backing of experienced fintech leaders. • You’ll join a team that cares deeply about customer impact, takes pride in its craft, and moves with urgency. We’re just getting started, and you’ll help shape the next chapter of our growth story. • Our Commitment to Inclusion • Plooto is committed to building an inclusive workplace where people of all backgrounds, experiences, and perspectives can thrive. We know great teams are built through diverse thinking, and we encourage you to apply even if your experience does not align perfectly with every qualification listed. • Accommodation is available throughout the recruitment process in accordance with applicable accessibility legislation. If you require accommodation at any stage, please let us know—we’re happy to work with you. • This posting is for one available position. Compensation will be determined based on the successful candidate’s knowledge, skills, experience, and overall alignment with the role.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT