Senior Privacy Analyst

SOTI•Mississauga, ON

1d•Hybrid

About The Position

SOTI is committed to providing its employees with endless possibilities; learning new things, working with the latest technologies and making a difference in the world. At SOTI, we are committed to delivering best-in-class mobile and IoT device management solutions. We are looking for unconventional thinkers who appreciate the art of creating great software. To us, being visionary is more important than doing things the way they’ve always been done. The People - From our humble origins in our founder’s basement, to our industry leading position today, SOTI has worked hard to foster a company culture that we can all believe in. A culture that emphasizes personal growth, continuous innovation and fun. The Growth - Our environment fosters new ideas, fresh perspectives, and the ability to take them over the goal line. SOTI is a fast-paced environment with a global reach that encourages you to make your mark and be part of something big! The Technology - You’ll get the chance to work with leading edge technologies and take on complex and interesting projects, as part of highly collaborative and agile teams. You will work alongside SOTI’s partners which include leading tech giants that will keep you on the cusp of emerging technologies.

Requirements

Bachelor’s degree.
3+ years of relevant privacy experience in a global software and/or technology company.
Strong knowledge of key privacy frameworks and laws applicable to global businesses (e.g., GDPR, PIPEDA and CPRA/CCPA).
Experience conducting privacy reviews and translating requirements into operational guidance for product and business teams.

Nice To Haves

CIPP certification (e.g., CIPP/C, CIPP/E, CIPP/US) and/or CIPM.
Experience supporting security compliance efforts (e.g., SOC 2, ISO 27001) and working closely with Security teams.
Familiarity with AI governance concepts and emerging regulation (e.g., EU AI Act), including risk assessments and control design.
Experience with privacy tooling (e.g., DSAR workflows, data mapping, consent/cookie management, vendor risk platforms).
Experience working in a matrixed SaaS organization.

Responsibilities

Help develop, operationalize, and continuously improve SOTI’s privacy program (governance, processes, templates, and controls).
Work with Product and Development to conduct privacy reviews for new features and product changes, embedding privacy-by-design and secure development practices.
Maintain a strong working knowledge of SOTI’s products and data flows to provide practical, risk-based guidance.
Build and maintain relationships with key stakeholders including Product, Development, Security, and Sales teams.
Support privacy impact assessments (PIAs/DPIAs), data mapping, and records of processing activities (RoPA) as needed.
Review and assess internal and external AI tools for privacy, security, and compliance risks; help implement deployment guardrails and documented approval processes.
Support the development and improvement of SOTI’s AI governance program.
Support contract reviews by assessing privacy and data protection provisions in customer, partner, and vendor agreements (e.g., DPAs, SCCs, security/privacy addenda).
Support the Security team with compliance efforts and evidence collection for audits and assessments (e.g., SOC, ISO 27001).
Respond to customer privacy questionnaires and coordinate inputs across internal teams to ensure accurate, consistent responses.
Coordinate and respond to data subject requests (DSRs/DSARs) in line with legal requirements and internal SLAs.
Support incident response activities involving personal data (including triage, investigation support, documentation, and breach notification assessments in collaboration with Security team).
Help maintain and update customer- and employee-facing privacy notices, internal policies, and standards.
Monitor and summarize developments in global privacy, AI, and security regulations and translate them into actionable recommendations.
Research and evaluate privacy-related tooling and automation opportunities to improve program efficiency, reporting, and risk management.