Manager, Privacy & Regulatory Compliance

About Plooto

Plooto is a payment automation platform built to help accountants, bookkeepers, and their clients take control of their payables and receivables. From approval workflows and audit trails to bulk payments and automated reconciliation, Plooto gives customers time back and confidence that their books are accurate and up to date.

Our customers range from busy entrepreneurs to finance teams and non-profits, with a strong footprint among accounting firms and bookkeeping professionals across Canada.
About the Role

We’re looking for a Manager, Privacy & Regulatory Compliance to lead and scale Plooto ’s privacy program while helping the business adopt AI, automation, and data-driven technologies responsibly.

Privacy expertise is the foundation of this role. As AI becomes more widely adopted across Plooto , the number and complexity of decisions involving personal and sensitive information will continue to grow. You will help the business navigate these decisions thoughtfully—establishing clear guardrails, identifying material risks, and enabling teams to innovate without creating unnecessary process or paperwork.

This is a hands-on individual contributor role for someone who is pragmatic, curious, and comfortable working in areas where the answers are still evolving. We are not looking for someone with decades of AI governance experience. We are looking for a strong privacy professional who is genuinely interested in AI, asks thoughtful questions, keeps up with emerging developments, and is excited to help shape Plooto ’s approach.

You will also support the ongoing implementation of Plooto ’s Enterprise Risk Management framework and provide additional capacity across the broader regulatory compliance program. Prior depth in ERM or AML/ATF is not essential; what matters is an ability and willingness to learn, apply sound judgment, and contribute where needed.

You’ll work closely with Product, Engineering, Security, Legal, People, Operations, and other teams to translate complex requirements into practical, proportionate solutions that help Plooto move quickly and responsibly.

The role reports to the Senior Manager, Compliance within the Payments Strategy & Compliance function.
Key Responsibilities

Privacy is the primary focus of this role. The role will also provide flexible support for enterprise risk management and broader regulatory compliance priorities as business needs evolve
-
Lead and continuously improve Plooto ’s privacy program , serving as a primary privacy subject-matter expert and supporting compliance with PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and other applicable privacy requirements.

-
Provide practical privacy guidance to the business , translating legal and regulatory requirements into clear, risk-based actions without creating unnecessary documentation, approvals, or operational friction.

-
Lead privacy assessments for new products, features, vendors, and data uses , including Privacy Impact Assessments. Apply a proportionate approach so the depth of review and documentation reflects the actual level of risk.

-
Help shape Plooto ’s approach to responsible AI , developing lightweight, scalable methods for assessing AI tools and use cases across privacy, data use, transparency, retention, access, automated decision-making, and third-party processing.

-
Embed privacy by design into how Plooto operates , partnering with Product, Engineering, Security, People, and other teams early in the development and implementation of new products, AI tools, models, vendors, and automated processes.

-
Manage core privacy operations , including data rights requests, privacy incidents and breach assessments, third-party privacy reviews, cross-border data considerations, and data retention and deletion practices.

-
Monitor emerging privacy, data, and AI developments in Canada and the United States, determine which developments are relevant to Plooto , and convert them into focu