We are currently seeking a Senior Privacy Analyst to join our Compliance team at Clio. Burnaby, Calgary, Toronto, Remote - Canada

Job Summary:

Clio is seeking an experienced and motivated Senior Privacy Analyst to operate, mature, and scale our global privacy program. You will play a critical role in ensuring our products, processes, and data handling practices comply with international privacy regulations (GDPR, CCPA/CPRA, PIPEDA, Australia Privacy Act, etc.) and align with industry best practices. Working cross-functionally, you will embed privacy principles into our culture, procurement, product development lifecycle, and build trust with our customers.

Who you are: 

You are a highly organized and detail-oriented individual, capable of developing and managing privacy programs, policies, and procedures. Beyond writing policies, you understand that there is a need to effectively operationalize a privacy program through collaboration with internal departments that function as data controllers. You have refined your research skills and have a grasp on major global privacy regulations, such as GDPR, CCPA/CPRA, and PIPEDA. Conducting risk assessments like DPIAs and PIAs in a technology environment is a routine activity for you and approach it with a healthy curiosity. You prefer to be proactive, and don’t shy away from team-based development whether it involves leveling up your team members or leveling yourself through continued education.

What you’ll be doing:

• Program Management & Automation: Maintain and adapt the company's privacy program, policies, procedures, and internal knowledge base as Clio continues to grow.

• Compliance Monitoring: Ensure compliance with applicable privacy laws and regulations in our existing markets (GDPR, CCPA/CPRA, PIPEDA), and others as they emerge.

• Metrics & Reporting: Define, track, and report on key privacy program metrics.

• Risk Assessment: Conduct and oversee Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and Legitimate Interests Assessments (LIAs) for new products, features, and processing activities.

• Policy & Training: Develop and update privacy training and awareness programs, including imparting a privacy forward mindset and coaching junior team members.

• Data Subject Rights: Participate in our DSAR pipeline, ensuring maintenance of coverage of all platforms in scope. 

• Cross-Functional Collaboration: Partner closely with Legal, Engineering, Security, IT, Marketing, HR, and Sales teams to integrate Privacy by Design principles and conduct Privacy Threshold Assessments. 

• Incident Response: Contribute to Business Continuity and Incident Response programs.

• Vendor Risk Management: Assist in the review and assessment of third-party vendor privacy practices and support the negotiation of Data Processing Agreements (DPAs).

• Stay Current: Monitor evolving privacy laws, regulations, enforcement trends, and best practices globally, advising the business on potential impacts and necessary changes.

Required Qualifications:

• Bachelor's degree in a relevant field (e.g., Information Systems, Business, Public Policy) or equivalent practical experience.

• Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT)

• 5+ years of direct experience in privacy program management, data protection, or a closely related legal/compliance role.

• Demonstrated knowledge of major global privacy regulations (GDPR, CCPA/CPRA, PIPEDA required; familiarity with Privacy frameworks from ISO, NIST are a plus).

• Proven experience developing and implementing privacy policies, procedures, and controls.

• Experience conducting privacy risk assessments (DPIAs/PIAs).

• Experience managing DSAR workflows and tools.

• Strong program/project management skills with the ability to track and contribute to multiple projects simultaneously.

• Excellent communication (written and verbal) and interpersonal skills, with the ability to effectively collaborate with technical and non-technical teams.

• Experience working within a technology or SaaS company environment.

• Experience in leveraging AI to assess and mitigate privacy risks associated with internal AI processes and automated agents.

• Brings a focus to effective and measured data minimization and protection across diverse systems.

Preferred Qualifications:

• Experience using privacy management software (e.g.,Securiti.ai, TrustArc).

• Candidates with experience in companies with SaaS delivery models preferred

• Familiarity with cloud computing environments (AWS, GCP) and SaaS architecture.

• Experience reviewing and negotiating Data Processing Agreements (DPAs).

What you will find here:

Compensation is one of the main components of Clio’s Total Rewards Program. We have developed a series of programs and processes to ensure we are creating fair and competitive pay practices that form the foundation of our human and high-performing culture.

Some highlights of our Total Rewards program include:

• Competitive, equitable salary with top-tier health benefits, dental, and vision insurance 

• Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin, London, New York City and Sydney) to be in office min. twice per week. 

• Flexible time off policy, with an encouraged 20 days off per year.

• $2000 annual counseling benefit

• RRSP matching and RESP contribution 

• Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years