Senior Information Security, Risk & Compliance Specialist

Geotab•Oakville, ON

1d•CA$104,400 - CA$135,700•Hybrid

About The Position

Geotab is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities. Geotab is advancing security, connecting commercial vehicles to the internet and providing web-based analytics to help customers better manage their fleets. Geotab’s open platform and Geotab Marketplace ®, offering hundreds of third-party solution options, allows both small and large businesses to automate operations by integrating vehicle data with their other data assets. Processing billions of data points a day, Geotab leverages data analytics and machine learning to improve productivity, optimize fleets through the reduction of fuel consumption, enhance driver safety and achieve strong compliance to regulatory changes. Our team is growing and we’re looking for people who follow their passion, think differently and want to make an impact. Ours is a fast paced, ever changing environment. Geotabbers accept that challenge and are willing to take on new tasks and activities - ones that may not always be described in the initial job description. Join us for a fulfilling career with opportunities to innovate, great benefits, and our fun and inclusive work culture. Reach your full potential with Geotab. To see what it’s like to be a Geotabber, check out our blog and follow us @InsideGeotab on Instagram.

Requirements

5-8 years of experience in security evaluation/analysis and/or risk assessments within a technology-focused industry.
Working knowledge of system and network security engineering best practices.
Deep familiarity with security compliance frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP; including certification/accreditation processes and industry reporting requirements.
Experience leading end-to-end security audits including planning, evidence collection, auditor liaison, and remediation tracking.
Demonstrated experience in third-party and supply chain risk management programs.
Expertise in common security tool use and GRC platforms.
High accuracy and meticulous attention to detail; able to work under pressure and respond to fast-changing priorities and deadlines.
Highly organized with the ability to manage multiple tasks and projects simultaneously.
Excellent verbal and written communication skills, including comfort with delivering presentations and training.
Strong interpersonal and relationship-building skills; a strong team player able to engage with all levels of the organization.
Strong analytical skills with the ability to problem-solve with well-judged decisions.
Strategic mindset with a keen sense of priorities and the ability to pivot as the landscape changes.
Technical competence using software programs including Google Suite for Business (Sheets, Docs, Slides).
Entrepreneurial mindset; comfortable in a flat organization.
Willingness to adopt and learn AI tools to streamline security and compliance workflows; open to integrating AI-driven insights into risk analysis, audits and decision-making.
Post-Secondary Diploma/Degree specialization in Computer Science, Engineering, or a related field.
Equivalent combination of education and/or work experience in related field may be substituted.
5-8 years of required previous experience in security evaluation/analysis, risk assessments, and/or compliance within a technology-focused industry.

Nice To Haves

Professional certification in Information Security from a reputable institution highly valued (e.g., CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor, ISO 42001, certifications).

Responsibilities

Provide information assurance and subject matter expertise in support of panels, committees, and working groups.
Ensure security compliance with legal and regulatory standards including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP.
Lead and oversee internal and external security audits against systems, processes, and network infrastructure; coordinate evidence collection, auditor liaison, and remediation tracking.
Develop, update, and revise information security policies, standards, and procedures.
Serve as a subject matter expert in security risk management with hands-on experience in technical security risk assessments and supply chain risk assessments.
Assess and manage third-party and vendor security risk including vendor assessments and ongoing monitoring.
Collaborate with and advise internal departments to improve security-related risks and embed security controls into business processes.
Act as a technical mentor and SME to junior team members; serve as a point of escalation for complex security issues and initiatives.
Continuously develop expertise across Geotab's security programs, internal systems, and data infrastructure, leveraging that knowledge to provide informed, practical security consulting to business and technical stakeholders.
Adopt and champion the use of AI tools and techniques to enhance security workflows, automate compliance tasks, and improve risk analysis capabilities; proactively learn and apply evolving AI capabilities.
Support Geotab global strategic initiatives and contribute to the maintenance of the departmental SOPs.
Consistently demonstrate Geotab's Core Values in all daily work and interactions.