Compliance Analyst

Trulioo•Vancouver, BC

10d•CA$80,000 - CA$105,000•Hybrid

About The Position

Trulioo is seeking an Information Security & Compliance Analyst to support and strengthen its information security and compliance programs. This role is crucial for coordinating compliance initiatives, managing audit activities, and maintaining certifications like ISO 27001 and SOC 2. The Analyst will collaborate with various departments including Legal, Privacy, IT, Cloud & Information Security, Operations, Finance, and People teams to ensure regulatory and customer requirements are met. The position aims to drive continuous improvement within the organization's Information Security Management System (ISMS) by combining technical compliance knowledge, project coordination, and stakeholder collaboration. The ideal candidate will be detail-oriented, proactive, and passionate about fostering a strong culture of information security and compliance. This is a full-time, permanent position based in the Vancouver office, operating on a hybrid model with three days per week in the office.

Requirements

2 - 4 years of operations, compliance, risk management or internal audit experience.
2 - 4 years of audit experience, with ISO 27001 or similar, or data privacy education or certification (e.g., Certified Internal Auditor, ISO/IEC 27001 Lead Auditor, CIPP/C or -/E).
Experience with GRC tools (OneTrust, ServiceNow GRC, Archer, etc.).
Strong written and verbal communication skills.
Excellent attention to detail.
Ability to manage projects and priorities independently.
Ability to lead audit and review processes end-to-end.
Ability to conduct root cause analysis reviews and pinpoint areas for improvement.
Understanding of current legislation/regulation issues and developments globally.
Proficient in leveraging AI language models (ChatGPT, Claude, etc.) to streamline workflows and improve productivity.

Responsibilities

Coordinate the ISO 27001:2022 information security management system processes, including internal and external ISO audits, annual Control Self Assessments, and post-audit reporting and remediation.
Coordinate SOC 2 auditing processes.
Lead general compliance audits and reviews of processes for policy violation/non-compliance areas.
Contribute to information security project reviews.
Lead external party on-site audits as required.
Contribute to the Finance team's audits by providing evidence and documentation.
Manage the annual information security policy review and improvement process.
Administer GRC workflows.
Contribute to employee awareness of the ISMS, information security, and compliance, including best practices in data privacy and protection.
Occasionally lead onboarding training.
Monitor emerging compliance standards and regulations and summarize potential impacts for the Compliance Manager.
Support Legal and Privacy with contract reviews and redlines from an ISC perspective.
Support responses to client due diligence, RFI/RFP requests, and contribute to external party on-site audits.
Support internal teams by responding to information security and compliance inquiries and escalating issues.
Contribute to the identification of compliance and data protection deficiencies or opportunities for improvement, and facilitate the development of solutions.
Contribute to raising any identified non-compliance via the corporate risk and non-conformity processes.
Provide incident coordination services as needed.
Contribute to root cause analysis of security incidents and remediation.
Help manage Third Party Risk Management activities, including supplier/service onboarding due diligence and annual reassessments.
Lead Trulioo's Security Due Diligence Outreach processes.
Plan, present, minute, and report on the quarterly Security Committee meeting to the executive team.
Contribute to ad-hoc initiatives such as information security metrics and objectives, attendance compliance tracking, and cross-functional risk/gap assessments.