Risk and Compliance Team Lead

BIS Safety Software

5d•Hybrid

About The Position

BIS Safety Software is a SaaS company on a mission to change how organizations manage safety, learning, and compliance. Since 2006, we've been building an innovative software solution in a space where trust and data integrity matter. As we grow, so does the need to strengthen how we manage risk, protect client data, and meet evolving regulatory standards. We are expanding our team and are looking to add a Risk and Compliance Team Lead who excels in risk management and compliance. About the Role You'll lead a small team, set priorities, and build the frameworks and processes that keep our business, our clients, and our data protected . This role sits at the intersection of security, privacy, and operations - working across teams to identify risks, close gaps, and ensure our software meets the standards our clients depend on. This is a hands-on leadership role. You'll set direction for the function while staying close to the work , and you'll have real influence over how compliance and risk management grow at BIS. If you are particular about the particulars, enjoy building things that didn't exist before and making the things that do exist work better, this is a strong fit. This role is based in the Mountain Standard Time (MST) zone. For candidates located in the Edmonton area, this is an onsite position based out of our Sherwood Park office. For exceptional candidates located outside the region, we are open to discussing remote or periodic travel arrangements, provided they can effectively collaborate within MST business hours.

Requirements

Experience leading a team or function, with a track record of developing people, setting priorities, and driving accountability.
Proven ability to work effectively across technical and non-technical teams to drive alignment and results.
Comfortable operating as both a strategic leader and hands-on contributor - able to set direction for the function while staying close to the work.
Excel in managing multiple tasks and projects simultaneously.
Demonstrate excellent communication, reporting, and presentation skills.
Possess strong analytical skills to evaluate and improve complex processes.
Strong proficiency in Microsoft 365, with an interest in IT and technology (IT background is an asset).
6+ years of experience in privacy, data security, compliance, and risk management.
Postgraduate education in cybersecurity or a related field.
Strong understanding of Canadian privacy laws and regulations.
Experience in providing training and developing policy documents related to privacy and compliance.
Project management experience; PMP certification is a strong asset but not required.

Nice To Haves

PMP certification is a strong asset but not required.
IT background is an asset.

Responsibilities

Provide direction, structure, and oversight to ensure effective execution of all compliance and risk initiatives.
Partner with teams to proactively identify, assess, and address operational, IT, and data privacy risks.
Work with developers, customer support, and team leads to close gaps and implement effective risk mitigation strategies.
Develop, maintain, and continuously enhance frameworks, processes, and procedures aligned with evolving standards and regulations (PIPEDA, COPPA, GDPR).
Lead and support software updates to improve security controls and maintain regulatory compliance.
Coordinate third-party audits and conduct internal assessments, including SOC 2 and PCI DSS.
Oversee incident response, including investigation, reporting, communication, and remediation.
Prepare and present clear compliance reports and documentation for internal and external stakeholders.
Promote a strong culture of data security through training and team enablement.
Mentor team members, support their growth, and build accountability within the function.
Act as a key point of contact to meet security and compliance requirements.