[Hiring] Manager, Privacy & Regulatory Compliance @Plooto

Role Description

We’re looking for a Manager, Privacy & Regulatory Compliance to lead and scale Plooto’s privacy program while helping the business adopt AI, automation, and data-driven technologies responsibly.

• Privacy expertise is the foundation of this role.
• You will help the business navigate decisions involving personal and sensitive information thoughtfully.
• This is a hands-on individual contributor role for someone who is pragmatic, curious, and comfortable working in evolving areas.
• You will support the ongoing implementation of Plooto’s Enterprise Risk Management framework.
• You’ll work closely with Product, Engineering, Security, Legal, People, Operations, and other teams.
• The role reports to the Senior Manager, Compliance within the Payments Strategy & Compliance function.

Key Responsibilities

• Lead and continuously improve Plooto’s privacy program, serving as a primary privacy subject-matter expert.
• Provide practical privacy guidance to the business, translating legal and regulatory requirements into clear, risk-based actions.
• Lead privacy assessments for new products, features, vendors, and data uses, including Privacy Impact Assessments.
• Help shape Plooto’s approach to responsible AI, developing scalable methods for assessing AI tools and use cases.
• Embed privacy by design into how Plooto operates, partnering with various teams early in development.
• Manage core privacy operations, including data rights requests, privacy incidents, and third-party privacy reviews.
• Monitor emerging privacy, data, and AI developments in Canada and the U.S., converting them into actionable recommendations.
• Support the rollout and ongoing implementation of Plooto’s Enterprise Risk Management framework.
• Help make risk management a practical business discipline.
• Support regulatory change and third-party risk activities.
• Provide flexible support across Plooto’s broader regulatory compliance program.
• Build understanding and accountability across the organization through clear guidance and training.

Qualifications

• 3–6+ years of hands-on privacy experience, ideally within fintech, payments, technology, or another regulated environment.
• Strong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25.
• Practical experience conducting Privacy Impact Assessments, privacy reviews, and privacy incident assessments.
• Genuine curiosity about AI and emerging technologies.
• An ability to simplify complex requirements and create clear guidance.
• A practical, action-oriented mindset.
• Strong written and verbal communication skills.
• The ability to independently manage competing priorities and exercise sound judgment.
• Familiarity with U.S. privacy frameworks, including CCPA/CPRA, is an asset.
• Exposure to enterprise risk management or payments compliance is helpful but not required.
• CIPP/C certification is preferred; other relevant privacy certifications are assets.
• Bilingualism in English and French is an asset.

Benefits

• Opportunity to make a meaningful impact in the payments space.
• Strong product-market fit and significant opportunity ahead.
• Join a team that cares deeply about customer impact and takes pride in its craft.
• Be part of a mission that matters.

Company Description

Plooto is a payment automation platform built to help accountants, bookkeepers, and their clients take control of their payables and receivables.

• Our customers range from busy entrepreneurs to finance teams and non-profits.
• We have a strong footprint among accounting firms and bookkeeping professionals across Canada.