Senior Privacy & Compliance Program Manager

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee MZLA’s privacy and compliance program initiatives, encompassing program planning, routine assessments, risk monitoring, documentation, and reporting to leadership.

• Convert privacy, security, and compliance mandates into actionable processes that align with MZLA’s offerings.

• Manage vendor and tool evaluations, collaborating with multiple stakeholders to identify and document data flows and relevant considerations.

• Assist in privacy operations and data governance for a worldwide user base, including Data Subject Access Requests (DSAR) and privacy rights workflows.

• Contribute to the development and upkeep of practical data inventories and data maps that outline the data MZLA gathers.

• Collaborate with technical teams to endorse privacy-by-design principles for new products, services, tools, and data processing activities.

• Aid in compliance and audit readiness initiatives, including preparations related to ISO standards, policy implementation, and training sessions.

• Establish ongoing review practices for vendors, tools, systems, policies, and data processing activities.

• Enhance incident response preparedness by defining roles and documentation requirements.

• Create guidance materials, checklists, templates, and training resources to assist teams in fulfilling privacy and compliance standards.

⛳️ Requirements

• A minimum of 8 years of relevant professional experience, ideally within a software, SaaS, technology, or technical product setting.

• At least 5 years of direct or closely related hands-on experience in privacy operations, compliance program management, governance, risk, and compliance (GRC), legal operations, security compliance, vendor governance, data governance, or similar roles.

• Proven experience in coordinating cross-functional programs involving legal, engineering, product, support, finance, and operations teams.

• Background in supporting vendor, tool, or subprocessor evaluations, considering privacy, security, legal, and operational risks.

• Experience in privacy operations, data governance, or user rights workflows for products or services catering to international users.

• Technical proficiency and the capability to collaborate with technical teams to comprehend data flow within systems.

• Knowledge of incident response, breach readiness, or security/privacy escalation procedures.

• Strong skills in project and program management, exceptional written communication, sound judgment, and the ability to construct pragmatic, appropriately scaled processes for a small yet expanding organization.

• Capacity to learn about, assess, and responsibly utilize emerging technologies, including AI-enabled tools.

🏝️ Benefits

• Fully remote work & schedule flexibility

• Company-provided laptop

• Annual bonus program

• Monthly remote work stipend

• Annual professional development stipend

• Access to Coursera learning platform

• Industry conferences

• Company all-hands and team gatherings

• 24 days PTO per year (prorated)

• Your birthday

• Year-end company shutdown

• 9 wellbeing days

• Public holidays

• Other paid leave

• Quarterly wellbeing stipend for personal/family activities

• RRSP contributions

• Health, dental, & vision insurance

• Disability insurance

• Life insurance

• Employee assistance program

• Paid parental leave

• Paid sick days