Manager, Compliance & Privacy

CanadaHelps•Toronto, ON

2d•CA$95,000 - CA$105,000•Hybrid

About The Position

At CanadaHelps, we believe in the power of generosity and are looking for a full-time Manager, Compliance & Privacy to help build and operate a formal, organization-wide compliance and privacy program. This role reports to the COO / Privacy Officer and will be responsible for identifying compliance gaps, developing policies and procedures, supporting staff training, and leading ongoing monitoring, reviews, and audits across privacy, charitable-sector regulatory obligations, and anti-money laundering requirements. This is a hands-on role for someone who enjoys creating structure and can work cross-functionally to embed compliance into daily operations. It offers direct executive visibility and the chance to make a tangible impact on protecting and serving charities and donors across Canada. The position is remote but may require occasional in-office presence in Toronto for team collaborations.

Requirements

5 years of progressive experience in a compliance, privacy, or regulatory role in Canada, ideally within financial services, fintech, or the non-profit/charitable sector.
Post-secondary degree in business, public policy, or a related field, or equivalent professional experience.
Working knowledge of PIPEDA, CASL and Canadian provincial privacy regimes (e.g., Quebec's Law 25).
Strong written communication skills, with the ability to translate regulatory requirements into clear, practical policies and training materials.
Comfortable working independently to help build structure in a growing compliance function, while collaborating effectively across technical and non-technical teams.
Detail-oriented, organized, and methodical, with experience maintaining version-controlled documentation and compliance registers.
Sound judgment in balancing regulatory rigor with the practical needs of a mission-driven, resource-conscious organization.

Nice To Haves

Direct experience conducting or supporting Privacy Impact Assessments.
Familiarity with CRA requirements for registered charities and FINTRAC/AML obligations.
Experience in building or formalizing a compliance program from the ground up in a start-up environment.
Certification with IAPP as a Certified Information Privacy Professional/Canada (CIPP/C).

Responsibilities

Design and implement a formal, organization-wide compliance program, including governance structure, policy framework, training, and reporting.
Conduct compliance gap assessments across privacy, charitable, and AML/ATF regulations and develop a remediation roadmap.
Draft, maintain, and version-control compliance policies, standard operating procedures, and internal guidance documents.
Establish a compliance risk register with ownership, risk ratings, and remediation timelines.
Support incident response and issue management for compliance-related matters.
Support and scale the execution of Privacy Impact Assessments (PIAs) for new vendors, products, and features.
Monitor compliance with PIPEDA, Quebec's Law 25, and other applicable privacy legislation.
Participate in vendor/third-party risk assessments, including DPAs and sub-processor reviews.
Support CASL compliance for electronic messaging, consent management, and donor/charity communications.
Monitor and advise on compliance with CRA regulations for registered charities and public foundations.
Support FINTRAC obligations and broader AML/ATF compliance, including recordkeeping and reporting.
Track emerging regulatory requirements and advise leadership on their impact.
Partner with DevOps & Security on data protection controls, security-linked compliance, and incident response.
Work with Charity & Donor Support to ensure front-line processes meet regulatory and privacy obligations.
Collaborate with Marketing and Analytics on consent management, CASL compliance, and responsible data handling.
Support Business Operations in vendor procurement and contracting with privacy and compliance assessments.