{"id":894596,"url":"https://alion.io/job/plooto-manager-privacy-regulatory-compliance","title":"Manager, Privacy & Regulatory Compliance","company":{"id":58155,"name":"Plooto","domain":"plooto.com","url":"https://alion.io/company/plooto","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada","Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":42000,"max_usd":82000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-09-07T19:06:56Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-27T17:06:04Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"About Plooto \nPlooto is a payment automation platform built to help accountants, bookkeepers, and their clients take control of their payables and receivables. From approval workflows and audit trails to bulk payments and automated reconciliation, Plooto gives customers time back and confidence that their books are accurate and up to date. \nOur customers range from busy entrepreneurs to finance teams and non-profits, with a strong footprint among accounting firms and bookkeeping professionals across Canada. \nAbout the Role \nWe’re looking for a Manager, Privacy & Regulatory Compliance to lead and scale Plooto’s privacy program while helping the business adopt AI, automation, and data-driven technologies responsibly. \nPrivacy expertise is the foundation of this role. As AI becomes more widely adopted across Plooto, the number and complexity of decisions involving personal and sensitive information will continue to grow. You will help the business navigate these decisions thoughtfully-establishing clear guardrails, identifying material risks, and enabling teams to innovate without creating unnecessary process or paperwork. \nThis is a hands-on individual contributor role for someone who is pragmatic, curious, and comfortable working in areas where the answers are still evolving. We are not looking for someone with decades of AI governance experience. We are looking for a strong privacy professional who is genuinely interested in AI, asks thoughtful questions, keeps up with emerging developments, and is excited to help shape Plooto’s approach. \nYou will also support the ongoing implementation of Plooto’s Enterprise Risk Management framework and provide additional capacity across the broader regulatory compliance program. Prior depth in ERM or AML/ATF is not essential; what matters is an ability and willingness to learn, apply sound judgment, and contribute where needed. \nYou’ll work closely with Product, Engineering, Security, Legal, People, Operations, and other teams to translate complex requirements into practical, proportionate solutions that help Plooto move quickly and responsibly. \nThe role reports to the Senior Manager, Compliance within the Payments Strategy & Compliance function. \nKey Responsibilities \nPrivacy is the primary focus of this role. The role will also provide flexible support for enterprise risk management and broader regulatory compliance priorities as business needs evolve \nLead and continuously improve Plooto’s privacy program, serving as a primary privacy subject-matter expert and supporting compliance with PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and other applicable privacy requirements. \nProvide practical privacy guidance to the business, translating legal and regulatory requirements into clear, risk-based actions without creating unnecessary documentation, approvals, or operational friction. \nLead privacy assessments for new products, features, vendors, and data uses, including Privacy Impact Assessments. Apply a proportionate approach so the depth of review and documentation reflects the actual level of risk. \nHelp shape Plooto’s approach to responsible AI, developing lightweight, scalable methods for assessing AI tools and use cases across privacy, data use, transparency, retention, access, automated decision-making, and third-party processing. \nEmbed privacy by design into how Plooto operates, partnering with Product, Engineering, Security, People, and other teams early in the development and implementation of new products, AI tools, models, vendors, and automated processes. \nManage core privacy operations, including data rights requests, privacy incidents and breach assessments, third-party privacy reviews, cross-border data considerations, and data retention and deletion practices. \nMonitor emerging privacy, data, and AI developments in Canada and the United States, determine which developments are relevant to Plooto, and convert them into focused, actionable recommendations. \nSupport the rollout and ongoing implementation of Plooto’s Enterprise Risk Management framework, including coordinating risk assessments, maintaining the enterprise risk register, monitoring mitigation activities, and supporting risk reporting. \nHelp make risk management a practical business discipline, working with leaders to identify material risks, clarify ownership, track meaningful actions, and maintain reporting that supports decision-making rather than documentation for its own sake. \nSupport regulatory change and third-party risk activities, helping assess new requirements and higher-risk relationships, identify accountable owners, and track implementation of proportionate controls. \nProvide flexible support across Plooto’s broader regulatory compliance program, including regulatory initiatives, audits, effectiveness reviews, remediation work, obligations under the Retail Payment Activities Act, and AML/ATF requirements under the PCMLTFA and FINTRAC guidance. \nBuild understanding and accountability across the organization through clear guidance, practical tools, and training on privacy, responsible AI, and risk management. \nQualifications \n3-6+ years of hands-on privacy experience, ideally within fintech, payments, technology, banking, financial services, or another regulated environment. \nStrong working knowledge of Canadian privacy requirements, particularly PIPEDA and Quebec Law 25, with familiarity with Alberta and British Columbia privacy legislation. \nPractical experience conducting Privacy Impact Assessments, privacy reviews, data rights requests, and privacy incident or breach assessments. \nThe judgment to apply privacy requirements proportionately and develop controls that are defensible, practical, and appropriate to the underlying risk. \nGenuine curiosity about AI and emerging technologies, including an interest in learning how new tools use data and helping the organization navigate evolving privacy and governance considerations. \nYou do not need extensive AI governance experience. Experience reviewing AI tools, automated processing, emerging technologies, or data-governance matters is an asset. \nAn ability to simplify complex requirements and create clear guidance, decision frameworks, and processes that people will actually use. \nA practical, action-oriented mindset. You are comfortable building structure where it is needed while avoiding bureaucracy that does not meaningfully reduce risk. \nStrong written and verbal communication skills, with the confidence to work collaboratively across Product, Engineering, Security, People, Operations, Legal, and leadership teams. \nThe ability to independently manage competing priorities, exercise sound judgment, and recognize when an issue requires escalation. \nFamiliarity with U.S. privacy frameworks, including CCPA/CPRA and emerging state privacy laws, is an asset. \nExposure to enterprise risk management, third-party risk, fintech regulation, payments compliance, or AML/ATF is helpful but not required. You should be curious and willing to build knowledge in these areas with the support of the broader Compliance team. \nCIPP/C certification is preferred. CIPP/US, CIPM, or other relevant privacy certifications are assets. \nBilingualism in English and French is an asset given Plooto’s Canadian regulatory obligations. \nWhy Become a Plootonian? \nIf you’re looking to make a meaningful impact, look no further. We’re transforming the payments space in North America by delivering an unrivalled product experience that solves a real and pressing problem for SMBs. \nOne of the biggest challenges small businesses face is managing their finances and cash flow-and Plooto helps address that. We have strong product-market fit, a significant opportunity ahead, and the backing of experienced fintech leaders. \nYou’ll join a team that cares deeply about customer impact, takes pride in its craft, and moves with urgency. We’re just getting started, and you’ll help shape the next chapter of our growth story. \nJoin Plooto and be part of a mission that matters. \nOur Commitment to Inclusion \nPlooto is committed to building an inclusive workplace where people of all backgrounds, experiences, and perspectives can thrive. We know great teams are built through diverse thinking, and we encourage you to apply even if your experience does not align perfectly with every qualification listed. \nAccommodation is available throughout the recruitment process in accordance with applicable accessibility legislation. If you require accommodation at any stage, please let us know-we’re happy to work with you. \nThis posting is for one available position. Compensation will be determined based on the successful candidate’s knowledge, skills, experience, and overall alignment with the role.","description_format":"text","description_chars":8775,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-09-14T09:11:27Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Talent Stream","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.666,"p_room":0.55,"age_days":49,"expected_fill_days":35,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/plooto-manager-privacy-regulatory-compliance","json_url":"https://alion.io/job/plooto-manager-privacy-regulatory-compliance.json","meta":{"generated_at":"2026-10-27T20:34:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11761,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58155},"rest":"https://alion.io/mcp/rest/get_company?id=58155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fplooto-manager-privacy-regulatory-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fplooto-manager-privacy-regulatory-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fplooto-manager-privacy-regulatory-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/plooto-manager-privacy-regulatory-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fplooto-manager-privacy-regulatory-compliance"}]}