Senior GRC Analyst, Privacy

Location

Calgary, Alberta; Vancouver, British Columbia

Employment Type

Full time

Location Type

Hybrid

Department

Risk & Compliance

What you’ll do:

Privacy Program & Governance

• Own and maintain Benevity’s Records of Processing Activities (ROPA) under both controller and processor regimes, ensuring compliance with GDPR Article 30 and equivalent requirements across applicable jurisdictions.
• Develop and maintain privacy policies, notices, standards, and control frameworks aligned with GDPR, UK‑GDPR, CPRA/CCPA, PIPEDA, CASL, and emerging global laws.
• Support privacy policy approval, exception management, and attestation processes, actively seeking opportunities for process improvement and automation.

Data Subject Rights & DSAR

• Build and manage DSAR intake, triage, and response workflows in compliance...