Security and Compliance Analyst

samdesk is backed by leading global investors and is headquartered in Edmonton, Alberta, with team members in multiple regions including North America, Europe, and Asia Pacific. We are a growing team of dreamers and builders, supporting large global customers around the world.

Check us out!
www.samdesk.io

Who You Are

We’re hiring a Security & Compliance Analyst to join our Infrastructure & Security team. This role has both technical and administrative work. You’ll help run our SOC 2 Type II program day to day, triage vulnerabilities, and answer the growing number of security and compliance questions from our customers and partners.

You’ll be the second set of hands on our security program. That means you’ll provide coverage across our compliance obligations and free up senior team members for larger initiatives such as ISO 27001. You’ll also build AI-assisted workflows that let a small team handle security and compliance work at scale.

What You’ll Do

* Support our SOC 2 Type II program day to day. This includes employee onboarding and offboarding, access reviews, evidence collection, policy upkeep, and case documentation.
* Handle employee software and access requests through our IT service desk, and evaluate new tools against our security standards.
* Conduct security reviews of new and existing vendors.
* Process customer data deletion requests and keep records of each one.
* Review regular vulnerability reports, triage findings, coordinate patching with engineering, and escalate issues when needed.
* Complete customer security questionnaires, the infosec sections of procurement and RFP responses, and annual security reviews in partnership with our sales and customer teams.
* Prepare monthly SR&ED and IRAP reporting with engineering and leadership.
* Build and maintain a knowledge base of past security and compliance answers in Claude, and use it to automate repetitive questionnaire and review work.
* Contribute to new compliance initiatives, including ISO 27001 and ISO 42001

We’re Looking for Someone With

Required

* 2+ years of experience in information security, GRC, IT audit or a related role
* Programming or scripting experience (Python preferred), comfortable reading code, working with APIs and automating routine tasks
* Hands-on experience supporting at least one SOC 2 audit cycle
* Working knowledge of ISO 27001 requirements and Annex A controls
* Familiarity with cloud environments (AWS preferred)
* Strong written communication, with the ability to explain controls clearly to technical and non-technical teammates
* Excellent organization and follow-through when juggling many deadlines and stakeholders

Nice to Have

* Experience with compliance automation platforms such as Vanta
* Experience using LLM tools like Claude or ChatGPT to automate workflows
* A security certification or related training
* Familiarity with SR&ED, IRAP, or other government program reporting
* Experience at a B2B SaaS company

You’ll Thrive Here If

* You take real ownership of the systems and processes you run, and you notice when something is off before anyone asks
* You have a bias toward action, and when a playbook doesn’t exist, you write one

What Are the Perks? What’s In It For You?

* Work at the intersection of AI, public safety, and enterprise technology, with a committed and passionate team of innovators at a fast growing startup.
* Competitive compensation and free access to a health benefits package, including dental, extended health, vision care, and a health spending account.
* Hybrid and flexible working schedule
* A seat on the rocket ship 🚀 buckle up!

Application Details

Help us help you stand out! Please thoughtfully answer the screening questions on the application page. We look forward to reviewing your application!

Diversity and Inclusion

samdesk is an equal opportunity employer committed to creating a safe, diverse and inclusive environment. We encourage qualified applicants of all backgrounds including ethnicity, religion, disability status, gender identity, sexual orientation, family status, age, nationality, and education levels to apply. If you are contacted for an interview and require accommodation during the interviewing process, please let us know.

The position is based out of Edmonton, AB but we may also consider remote candidates. Please note that only candidates selected for the interview process will be contacted. Thank you!