Canada onlyAbout The RoleWe are looking for a Privacy and Trust Specialist to join our growing IT, Security and Privacy Team! This role will collaborate closely with the VP & Chief Trust Officer and the VP of Legal to provide expertise in privacy and AI governance across all ThoughtExchange departments. Serving as a trusted advisor, the Privacy and Trust Specialist will stay abreast of data privacy and AI laws and regulations. They will support the Director of Information Security in maintaining ISO 27701 certification and future AI compliance initiatives. Additionally, they will work closely with the Information Technology Team on vendor contracts, privacy, and AI compliance reviews, and partner with product development by conducting privacy impact assessments to guide privacy and AI principles and identify potential risks.
What You’ll Do:
- Support the ThoughtExchange Privacy Program, including data privacy policies, procedures and training
- Assist in the implementation of the ThoughtExchange AI Governance Program
- Advise on AI and privacy-related aspects of product development, marketing and business operations
- Support the Information Technology Team for contract and privacy vendor reviews
- Identify and assess privacy risks associated with business processes, vendors and new software features
- Partner with sales and customer support with the completion of Student Data Privacy Agreements and Data Privacy Addendums
- Conduct Privacy Impact Assessments and Audits
- Respond to data subject requests (e.g., requests for access, deletion, or rectification of personal data)
- Stay up-to-date on current AI and privacy laws and regulations
- Support our Anti-Racism and Diversity, Equity and Inclusion (ADEI) mandate by (at a minimum) being aware of our ADEI commitment and initiatives and completing all required ADEI training
What We Think Is True About You:
- Minimum 1 year of experience directly working on privacy projects or engagements
- Bachelor's degree in a relevant field (e.g., law, computer science, business administration)
- Strong understanding of data privacy principles and best practices
- Knowledge of data privacy laws and regulations, including GDPR, CCPA, PIPEDA
- Excellent analytical and research skills
- Effective communication and writing skills
- Ability to translate legal concepts into clear and concise language for stakeholders
- Strong attention to detail and meticulous approach to compliance initiatives
- Ability to work independently
Nice to have:
- Experience managing ISO 27701 PIMS
- Experience supporting B2B SaaS companies
- Experience with AI Ethics or Governance Technical knowledge of data security and privacy technology
- IAPP Certification (CIPM or CIPP) or equivalent
If you don’t see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out, apply and tell us more about yourself in your application. Research has shown that women and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations, and life experiences to apply.
ThoughtExchange welcomes applications from people with disabilities. Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time to time, emergencies happen, and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility.
What we offer: ThoughtExchange wants to ensure our people are heard, supported, and cared for—so we invest in our employees. We're continuously asking our employees what they need to ensure we're supporting their successes in the workplace and in life. We are proud to offer our employees the following:
Benefits & Well-Being: From day one, you’ll receive a benefits package focused on health & wellness that includes a generous time off policy, flexible extended benefits plan options and company-wide Mental Health days off scheduled through the year. Our benefits package also includes maternity & parental leave top-up programs and access to Maple, Inklebot, and Headspace which support our employees' primary care, mental health, and wellness needs.
Flexibility: We’ve been remote-first for over ten years. We’re contribution-focused, and we operate on mutual trust because we need you to feel empowered to be your best self. You know the circumstances in which you excel—where you work and how you structure your day.
Ownership: In addition to competitive pay and benefits, employees receive share options when joining the company. Additional options are awarded throughout your ThoughtExchange career based on ongoing contributions to the company.
Culture: We walk the walk when it comes to our product, and we make sure no important decisions are made without including our employees' perspectives. We value and prioritize everyone’s voice, so we use our anonymous, anti-bias platform to make sure people are comfortable sharing their real thoughts and feedback.
Compensation: We want you to do your best work, and part of that is being happy with your compensation. We pay fairly, taking into account all the complexities of market rates, experience, location, and demand. We believe in pay transparency and pay equity.
Connection: In addition to remote hubs of employees across Canada & the US and offices in Rossland & Vancouver, we get together once a year as a company in some pretty cool locations. We also connect virtually as a company on a monthly basis and celebrate one another in our #gratitude Slack channel.
Growth: You’ll have the opportunity to join regular Anti-racism, Diversity, Equity & Inclusion (ADEI) and Learning & Development sessions. You also have access to an annual Professional Development stipend & Company Coach to ensure you can grow in your role & advance your career.
