Director, Regulatory Compliance Management, Advisory and Privacy Office

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee KOHO's compliance advisory function and manage the Privacy Office comprehensively.

• Provide guidance to Product, Marketing, Technology, Payments, Partnerships, and User Success regarding products, features, campaigns, and business arrangements.

• Address emerging regulatory inquiries and deliver clear written positions.

• Lead the compliance review process and approval of marketing materials, disclosures, and customer communications.

• Manage Whistleblower and Ethics programs, which include intake, investigation oversight, non-retaliation, and reporting to the Board.

• Oversee regulatory compliance management in collaboration with Legal, including horizon scanning, impact assessments, and the implementation of regulatory requirements.

• Maintain an inventory of regulatory obligations and map them to respective owners, policies, and controls.

• Drive the development and governance of compliance policies, standards, and procedures.

• Direct and enhance KOHO's enterprise privacy program and serve as the designated privacy lead.

• Establish and conduct Privacy Impact Assessments while governing consent, data collection, usage, disclosure, retention, and cross-border transfers.

• Manage privacy incidents and breaches, including response, notifications, assessments, and remediation efforts.

• Oversee privacy complaints, access and correction requests, data inventory, privacy notices, and privacy training.

• Mentor, coach, and develop compliance and privacy professionals.

• Collaborate with Financial Crime, Compliance Testing, Operational Risk, Internal Audit, Legal, and Tech/Cyber teams.

• Represent KOHO in industry associations, peer forums, and with regulators.

• Prepare decision-ready materials for senior management and Board-level committees.

• Integrate AI, automation, and data analytics into compliance and privacy processes.

• Advise on the responsible use of AI, focusing on transparency, fairness, explainability, and the use of personal information.

• Assess and implement RegTech and privacy technology solutions.

⛳️ Requirements

• Over 10 years of progressive experience in compliance, privacy, or regulatory law within the financial services sector, including significant advisory experience.

• Extensive working knowledge of Canadian consumer protection, retail banking or payments, and privacy laws.

• Proven experience in building or significantly enhancing a privacy program or regulatory change initiative.

• Strong leadership abilities and exceptional writing skills.

• Familiarity with regulated fintechs, neobanks, or direct-to-consumer financial institutions.

• A genuine passion for promoting financial wellness.

• Relevant certifications such as CIPP/C, CAMS, CRCM, LL.B/JD, or equivalent credentials are advantageous.

• Legally authorized to work in Canada.

🏝️ Benefits

• Competitive salary and equity options.

• Generous vacation policy.

• Wellness days to support employee well-being.

• Flex Days for better work-life balance.

• Holiday closure to enjoy time off.

• Remote-first work environment.

• Support for coworking spaces.

• Annual all-hands retreat for team bonding.

• Access to coaching and growth programs.

• Parental top-up and leave policies.

• Comprehensive health benefits package.

• Power-up budgets for books, home office setups, phone & internet, AI tools, and professional development.

• Opportunities for asynchronous collaboration.

• Flexible working hours.