Senior GRC Analyst, Privacy Location Calgary, Alberta; Vancouver, British Columbia

Employment Type Full time

Location Type Hybrid

Department Risk & Compliance

What you’ll do: Privacy Program & Governance

Own and maintain Benevity’s Records of Processing Activities (ROPA) under both controller and processor regimes, ensuring compliance with GDPR Article 30 and equivalent requirements across applicable jurisdictions.

Develop and maintain privacy policies, notices, standards, and control frameworks aligned with GDPR, UK‑GDPR, CPRA/CCPA, PIPEDA, CASL, and emerging global laws.

Support privacy policy approval, exception management, and attestation processes, actively seeking opportunities for process improvement and automation.

Data Subject Rights & DSAR

Build and manage DSAR intake, triage, and response workflows in compliance with statutory deadlines (30 days under GDPR; 45 days under CPRA), including coordin...