Senior Privacy Analyst

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely.  We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice .

Summary: We are currently seeking a Senior Privacy Analyst to join our Compliance team at Clio. Burnaby, Calgary, Toronto, Remote - Canada Job Summary: Clio is seeking an experienced and motivated Senior Privacy Analyst to operate, mature, and scale our global privacy program. You will play a critical role in ensuring our products, processes, and data handling practices comply with international privacy regulations (GDPR, CCPA/CPRA, PIPEDA, Australia Privacy Act, etc.) and align with industry best practices. Working cross-functionally, you will embed privacy principles into our culture, procurement, product development lifecycle, and build trust with our customers.

You are a highly organized and detail-oriented individual, capable of developing and managing privacy programs, policies, and procedures. Beyond writing policies, you understand that there is a need to effectively operationalize a privacy program through collaboration with internal departments that function as data controllers. You have refined your research skills and have a grasp on major global privacy regulations, such as GDPR, CCPA/CPRA, and PIPEDA. Conducting risk assessments like DPIAs and PIAs in a technology environment is a routine activity for you and approach it with a healthy curiosity. You prefer to be proactive, and don’t shy away from team-based development whether it involves leveling up your team members or leveling yourself through continued education. What you’ll be doing: Program Management & Automation : Maintain and adapt the company's privacy program, policies, procedures, and internal knowledge base as Clio continues to grow. Compliance Monitoring: Ensure compliance with applicable privacy laws and regulations in our existing markets (GDPR, CCPA/CPRA, PIPEDA), and others as they emerge. Metrics & Reporting : Define, track, and report on key privacy program metrics. Risk Assessment: Conduct and oversee Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and Legitimate Interests Assessments (LIAs) for new products, features, and processing activities. Policy & Training : Develop and update privacy training and awareness programs, including imparting a privacy forward mindset and coaching junior team members. Data Subject Rights: Participate in our DSAR pipeline, ensuring maintenance of coverage of all platforms in scope.  Cross-Functional Collaboration : Partner closely with Legal, Engineering, Security, IT, Marketing, HR, and Sales teams to integrate Privacy by Design principles and conduct Privacy Threshold Assessments.  Incident Response : Contribute to Business Continuity and Incident Response programs. Vendor Risk Management : Assist in the review and assessment of third-party vendor privacy practices and support the negotiation of Data Processing Agreements (DPAs). Stay Current : Monitor evolving privacy laws, regulations, enforcement trends, and best practices globally, advising the business on potential impacts and necessary changes.

Bachelor's degree in a relevant field (e.g., Information Systems, Business, Public Policy) or equivalent practical experience. Privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, CIPT) 5+ years of direct experience in privacy program management, data protection, or a closely related legal/compliance role. Demonstrated knowledge of major global privacy regulations (GDPR, CCPA/CPRA, PIPEDA required; familiarity with Privacy frameworks from ISO, NIST are a plus). Proven experience developing and implementing privacy policies, procedures, and controls. Experience conducting privacy risk assessments (DPIAs/PIAs). Experience managing DSAR