Privacy and Compliance Analyst

About the role

We are seeking a Privacy and Compliance Analyst to join a fast‑growing SaaS organization in Canada. In this role you will help strengthen privacy, risk, and compliance practices, ensuring that data handling and security controls meet evolving regulatory requirements such as GDPR and PIPEDA.

Key responsibilities

• Execute privacy, security, and compliance initiatives aligned with organizational objectives and regulatory timelines.
• Identify, assess, and mitigate operational, IT, and data‑privacy risks in partnership with cross‑functional teams.
• Develop, maintain, and continuously improve compliance frameworks, policies, and procedures (e.g., GDPR, PIPEDA, COPPA, SOC 2, PCI DSS).
• Support internal and external audits by coordinating documentation, assessments, and remediation actions.
• Manage or support incident‑response activities, including investigation, documentation, communication, and follow‑up remediation.
• Monitor regulatory changes and translate them into actionable internal policies and operational practices.
• Prepare compliance reports and updates for leadership, clients, and auditors.
• Collaborate with internal teams, clients, vendors, and auditors to ensure ongoing compliance alignment.

Required profile

• 5+ years of experience in privacy, data protection, compliance, cybersecurity, or risk‑management roles.
• Post‑secondary or postgraduate education in cybersecurity, information security, law, or a related field.
• Strong knowledge of Canadian privacy legislation and familiarity with international frameworks such as GDPR.
• Experience supporting audits, compliance assessments, and policy development.
• Proven ability to manage projects effectively; PMP certification is a plus.

Required skills