Principal Security & Compliance Analyst

Autodesk•Toronto, ON

3d•CA$125,000 - CA$183,700•Onsite

About The Position

We are seeking a highly skilled and technically adept Principal Security & Compliance Analyst to join our dynamic team at Autodesk. The ideal candidate will possess a deep understanding of security compliance frameworks, substantial technical acumen, and the ability to assess and explain compliance requirements effectively. This senior-level role is crucial in ensuring our systems and processes comply with industry standards and regulatory requirements by working closely with both system owners and control owners. The Principal Security & Compliance Analyst will also play a key role in strategic planning, leading complex projects, implementing AI-driven workflows, and mentoring junior team members.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CISM, CISA) preferred
Minimum of 8 years of experience in security compliance, information security, or a related field, with a strong technical background
Proven experience with supporting compliance efforts and integration of recent acquisitions
In-depth knowledge of security compliance frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR, CCPA, HIPAA)
Excellent communication and interpersonal skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders
Proven experience with decision-making frameworks and experience driving different length projects simultaneously
Demonstrated ability to lead and manage complex projects, including planning, execution, and delivery
Experience in assessing security controls and explaining compliance requirements to technically minded control owners
Strong project management skills, with the ability to manage multiple projects and priorities simultaneously and proactively communicate issues, delays, and impact

Nice To Haves

Experience with cloud security and compliance (e.g., AWS, Azure, Google Cloud) is highly desirable

Responsibilities

Support the compliance efforts of key Autodesk products to ensure their compliance with Autodesk's standards and regulatory requirements and certifications
Develop and implement strategies to seamlessly integrate products and services into Autodesk compliance programs. This involves rapid gap assessments, project management skill, and aligning policies, procedures, and controls.
Make use of AI as a part of daily work and consistently scale and transform easily repeatable tasks and workstreams into streamlined, event driven compliance
Evaluate new compliance frameworks and conduct thorough gap assessments to identify areas where Autodesk's compliance program may need improvement or adjustment to meet new regulatory requirements. Develop and implement remediation plans to address any identified gaps
Provide ongoing expert support across existing Autodesk compliance programs including SOC2, SOC1, ISO27001, SOX, PCI, and FedRAMP
Prepare and present detailed reports and roadmaps on compliance status, audit findings, and remediation plans to senior management and stakeholders
Mentor and provide guidance to junior team members to foster professional growth and development