[Hiring] Director, Regulatory Compliance Management @KOHO

Role Description

We’re looking for a seasoned Director, Regulatory Compliance Management, Advisory and Privacy Office to lead the advisory heart of KOHO’s Compliance function and to own our Privacy Office end to end. Reporting to the Chief Compliance Officer, you will be the trusted advisor to our business partners, such as product (lending, core banking, growth & onboarding), marketing, and user success, and before they build — translating a dense regulatory landscape into clear and useful guidance. You will also own KOHO’s privacy program, from Privacy Impact Assessments and consent design through to breach response.

This is a hands-on leadership role for someone who is energized by ambiguity, comfortable being the decision-maker in the room, and motivated by building durable programs rather than inheriting them. If you believe compliance should make good products possible rather than merely permissible, you’ll do your best work here.

What You’ll Be Doing

• Compliance Advisory
  • Act as the primary compliance advisor to business partners such as Product (lending, core banking, growth & onboarding), Marketing, Technology, Payments, Partnerships, and User Success, providing timely, practical, risk-based guidance on new products, features, campaigns, and business arrangements.
  • Own the regulatory advisory and interpretation function, resolving novel questions with clear written positions and a defensible rationale that stands up to regulatory and audit scrutiny.
  • Lead compliance review and sign-off of marketing materials, disclosures, and customer communications, and embed obligations into product development early.
  • Own the Whistleblower and Ethics programs, including intake, investigation oversight, non-retaliation, and ethics reporting to the Board.
• Regulatory Compliance Management
  • In collaboration with Legal, own the regulatory compliance management program: horizon scanning, impact assessment, and coordinated implementation of new and amended regulatory requirements.
  • Maintain KOHO’s regulatory obligations inventory and the mapping of obligations to responsible business owners, policies, and controls.
  • Lead the development, refresh, and governance of compliance policies, standards, and procedures, including annual approval cycles.
• Privacy Office (Deputy Chief Privacy Officer)
  • Own and mature KOHO’s enterprise privacy program, aligned to privacy legislation, and act as KOHO’s designated privacy lead.
  • Establish and run the Privacy Impact Assessment process for new products, vendors, data uses, and technology changes, and govern consent, collection, use, disclosure, retention, and cross-border transfer of personal information on a privacy-by-design basis.
  • Lead privacy incident and breach response, including containment coordination, real-risk-of-significant-harm assessments, regulatory and individual notification, and root cause remediation.
  • Own privacy complaints and access and correction requests, the data inventory and privacy notices, and privacy training and awareness across the organization.
• Team Leadership and Industry Engagement
  • Lead, coach, and develop a team of compliance and privacy professionals, setting clear priorities and raising the technical bar of the function.
  • Partner closely with Financial Crime, Compliance Testing, Operational Risk, Internal Audit, Legal, and Tech/Cyber to ensure integrated coverage and no gaps between mandates.
  • Represent KOHO externally with industry associations, peer forums, and regulator outreach, staying ahead of emerging compliance, privacy, and conduct risk trends.
  • Prepare and present clear, decision-ready materials for senior management and applicable Board-level committees.
• AI, Automation and Innovation
  • Apply AI, automation, and data analytics to advisory intake, regulatory horizon scanning, marketing review, and privacy assessments.
  • Advise the business on the responsible use of AI, including model transparency, fairness, explainability, and personal information use.
  • Evaluate and implement RegTech and privacy technology that improves speed and consistency without diluting rigour.

Qualifications

• 10+ years of progressive compliance, privacy, or regulatory legal experience in financial services, with meaningful time spent in an advisory capacity.
• Deep working knowledge of Canadian consumer protection, retail banking or payments, and privacy legislation.
• Experience in building or substantially maturing a privacy program or regulatory change program.
• Strong people leader and clear writer — able to provide straightforward answers to complex questions.
• Experience in regulated fintech, neobank, or direct-to-consumer financial institutions is preferred.
• Relevant designation (CIPP/C, CAMS, CRCM, LL.B/JD, or equivalent) is an asset.

Requirements

• Budgeted salary range: $190,000-230,000 CAD / year.
• Compensation determined through various factors including comparable salary market data within Canada, technical skill assessment, previous work history, and internal pay equity.

Benefits

• Work-life integration with flexible hours and a remote-first setup.
• Supportive environment that prioritizes autonomy and high trust.