Sun Life compliance director overseeing CIRO trade supervision and risk - based monitoring across mutual fund and securities businesses. Leading regulatory oversight, transformation, reporting, and a high - performing compliance team.
About the role
- Senior GRC Analyst at Benevity managing privacy compliance across multiple frameworks and jurisdictions. Responsible for ROPAs, DSAR workflows and collaboration with various teams.
Responsibilities
- Own and maintain Benevity’s Records of Processing Activities (ROPA) under both controller and processor regimes.
- Develop and maintain privacy policies, notices, standards, and control frameworks aligned with GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, CASL, and emerging global laws.
- Build and manage DSAR intake, triage, and response workflows in compliance with statutory deadlines.
- Design, operationalize, and continuously improve the Data Protection Impact Assessment (DPIA) process.
- Review and support the negotiation of Data Processing Agreements and data transfer mechanisms in collaboration with Legal.
- Maintain and enhance privacy workflows in GRC platforms to automate compliance operations at scale.
- Design and deliver privacy awareness and training programs to build a culture of data protection.
Requirements
- 5+ years of experience in privacy, data protection, GRC, or a closely related field, ideally within a SaaS or high-growth technology environment.
- Deep, practical knowledge of global privacy frameworks, including GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, and CASL, with working familiarity of emerging regimes (India DPDP, Swiss FADP, AU Privacy Act reforms).
- Hands-on experience building and maintaining ROPAs under both controller and processor regimes, managing DSAR workflows, conducting DPIAs, and maintaining subprocessor inventories.
- Experience supporting or operating within a DPO function, including regulatory interface and breach notification processes.
- Proven ability to review and support the negotiation of Data Processing Agreements and data transfer mechanisms in collaboration with Legal.
- Hands-on experience with privacy or GRC tooling (e.g., OneTrust Privacy module, Hyperproof, or equivalent) to operationalize compliance workflows at scale.
- Ability to communicate complex privacy and regulatory concepts clearly to technical, legal, and business audiences.
- A demonstrated interest and track record in leveraging AI and automation as a force multiplier, streamlining privacy operations, accelerating routine workflows, and expanding program capacity without proportional headcount growth.
- Certifications such as CIPP/E, CIPP/US, or CIPM are highly valued; CIPT, CISM, or CRISC are also welcomed.
Benefits
- Flexible hybrid work arrangements
- Opportunity to build a culture of data protection
- Growth opportunities
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Compliance Manager advising Affirm’s consumer card program on U.S. financial regulations. Reviewing card products, marketing, disputes, and remediation for compliant growth.
Compliance Manager owning risk - based advisory for Affirm Card at Affirm, which provides transparent pay - over - time financial products. Reviewing card compliance, remediation, and regulatory requirements.
Sun Life AVP leading strategic programs, innovation, insights and regulatory operations. Integrating governance, modernization, analytics and change across Canadian wealth and insurance businesses.
Senior Compliance Associate strengthening Coinbase Canada's AML, KYC, sanctions, and FINTRAC reporting program. Managing cases, risk assessments, regulatory filings, and compliance automation for cryptocurrency operations.
Regulatory labeling manager overseeing global IMP labeling for Telix’s precision radiopharmaceuticals. Supporting clinical trials and regulatory compliance for cancer and rare - disease treatments.
Quality and compliance specialist overseeing GMP, accreditation, QMS and pharmacovigilance for Shared Health Diagnostic Services in Manitoba. Ensuring regulatory compliance across provincial healthcare sites.
Compliance officer investigating energy - sector violations for British Columbia’s energy regulator. Conducting inspections, enforcement actions, emergency response, and administrative case preparation.
Senior Compliance Consultant strengthening Sun Life’s Canadian disability - management governance and risk controls. Leading audits, risk validation, business continuity, and compliance initiatives for Group Disability.
Regulatory intelligence leader monitoring global rules for Telix Pharmaceuticals, a precision radiopharmaceutical company. Translating regulatory developments into strategies, communications, and cross - functional actions.