Small businesses represent 99.9% of all companies, yet they're still forced to choose between clunky, outdated enterprise phone systems or their personal phones. This multi-billion dollar market has been overlooked for decades, left to cobble together solutions that slow them down instead of helping them grow. We bring calls, texts, and customer information together into one easy-to-use, AI-powered platform. We're not just building a phone system. We're setting a new standard for how businesses connect with their customers. Today, Quo is trusted by more than 120,000 companies and rated #1 in customer satisfaction on G2. We're looking for a Senior Privacy & Information Security Specialist to own the operation of Quo's privacy and data governance program, with a sharp focus on a fast, defensible data subject request (DSR) process. This is a senior individual-contributor role that turns requirements under CCPA/CPRA and PIPEDA into working controls, and coordinates Support, Marketing, Legal, and Engineering to meet them. Own the end-to-end request lifecycle: intake, identity verification, fulfillment across systems, and closure, covering access, deletion, correction, portability, and opt-outs Define escalation paths and exception handling for complex or high-risk requests, and keep an audit-ready record of every decision Build training, documentation, and playbooks for the teams who handle requests Privacy Engineering & Data Governance Maintain a data inventory and data-flow maps across production, analytics, marketing, support, and third-party systems Build and maintain controls for data minimization, retention, secure deletion, consent, and preference management, including how they apply to AI/ML training data, inference logs, and model outputs Review current products,



vendors, and integrations for privacy risk, including DPA and subprocessor upkeep Governance, Risk & Compliance Support the development of privacy and security policies, standards, and controls Participate in risk assessments, control-gap analysis, and remediation planning, and coordinate evidence collection for audits Support privacy incident response, including breach scoping and regulatory notification timelines (CCPA/CPRA, GDPR, PIPEDA), alongside Legal and Security Track changes in privacy regulation and help assess their operational impact with Legal Significant experience in privacy operations, privacy engineering, data governance, or GRC, including running DSR workflows across multiple systems and teams APIs, databases, identity systems, SaaS, and cloud environments Comfortable mapping data flows and translating legal or regulatory requirements into technical controls and repeatable procedures Able to drive cross-team work without direct authority, across Legal, Support, Marketing, Product, and Engineering Experience with privacy, consent-management, data-discovery, or GRC platforms The annual base salary range for this position is as follow, plus equity and

benefits:
Canada: $172,000
- $202,000 CAD Your total rewards package will include equity, extensive medical coverage, a monthly lifestyle stipend, and a flexible PTO policy. We're a remote-first company with a culture of trust, autonomy, and action. As we rapidly grow, we're intentionally building communities in a handful of hub cities while continuing to hire great talent wherever they happen to live. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. #

📌 Senior Privacy (Vancouver)
🏢 Quo
📍 Vancouver