About the role:

We are looking for a full-time Manager, Compliance & Privacy to help build and operate a formal, organization-wide compliance and privacy program. Reporting to the COO / Privacy Officer, this individual will identify compliance gaps, develop and document policies and procedures, support staff training, and lead ongoing monitoring, reviews, and audits across privacy, charitable-sector regulatory obligations, and anti-money laundering requirements.

This is a hands-on role suited to someone who enjoys creating structure and who can work cross-functionally to embed compliance into day-to-day operations.

An opportunity to bring your compliance and privacy expertise to Canada's largest online giving platform, with direct executive visibility and the chance to make a tangible impact on how charities and donors across the country are protected and served.

The annual salary range for this role is $95,000 - $105,000. Where an offer falls within this range is determined through the interview process. Candidates are benchmarked by the hiring team based on role scope, relevant experience, skill alignment, and expected impact, using consistent and objective criteria.

This position is remote but may require to be in-office in Toronto for team collaborations.

What you'll Do: (Primary Responsibilities)

Compliance Program Development

• Working closely with the COO, design and stand up a formal, organization-wide compliance program, built on the foundation of existing initiatives. This includes governance structure, policy framework, training and awareness programs, and reporting cadence.
• Conduct compliance gap assessments across privacy, charitable, and AML/ATF regulations and build a prioritized remediation roadmap.
• Draft, maintain, and version-control compliance policies, standard operating procedures, and internal guidance documents.
• Establish a compliance risk register with clear ownership, risk ratings, and remediation timelines.
• Support incident response and issue management processes for compliance-related matters.

Privacy

• Support and help scale execution of Privacy Impact Assessments (PIAs) for new vendors, products, and features, working alongside the Privacy Officer.
• Monitor compliance with PIPEDA, Quebec's Law 25, and other applicable provincial and federal private-sector privacy legislation.
• Participate in vendor/third-party risk assessments (DPAs, sub-processor review and audits).
• Support CASL compliance for electronic messaging, consent management, and donor/charity communications.

Regulatory & Sector-Specific Compliance

• Monitoring and advising for compliance with CRA regulations applicable to registered charities and public foundations.
• Support FINTRAC obligations and broader anti-money laundering / anti-terrorist financing (AML/ATF) compliance relevant to processing charitable donations, including recordkeeping and reporting requirements.
• Track emerging and evolving regulatory requirements relevant to the charitable and financial technology sectors and advise leadership on impact.

Cross-Functional Collaboration

• Partner with DevOps & Security on data protection controls, security-linked compliance requirements, and incident response.
• Work with Charity & Donor Support to ensure front-line processes meet regulatory and privacy obligations.
• Collaborate with Marketing and Analytics on consent management, CASL compliance, and responsible access, retention and use of donor/charity data.
• Support Business Operations in vendor procurement, and contracting processes with privacy and compliance assessments.

What you will bring to the table (experience):

Experience & Education

• 5 years of progressive experience in a compliance, privacy, or regulatory role in Canada, ideally within financial services, fintech, or the non-profit/charitable sector.
• Post-secondary degree in business, public policy, or a related field, or equivalent professional experience.
• Working knowledge of PIPEDA, CASL and Canadian provincial privacy regimes (e.g., Quebec's Law 25); direct experience conducting or supporting Privacy Impact Assessments strongly preferred.
• Familiarity with CRA requirements for registered charities and FINTRAC/AML obligations is an asset.
• Experience in being part of building or formalizing a compliance program in a start-up environment, from the ground up, is a strong asset.
• Certification with IAPP as a Certified Information Privacy Professional/Canada. CIPP/C is preferred.

Skills & Attributes

• Strong written communication skills, with the ability to translate regulatory requirements into clear, practical policies and training materials.
• Comfortable working independently to help build structure in a growing compliance function, while collaborating effectively across technical and non-technical teams.
• Detail-oriented, organized, and methodical, with experience maintaining version-controlled documentation and compliance registers.
• Sound judgment in balancing regulatory rigor with the practical needs of a mission-driven, resource-conscious organization.