Security and Compliance Analyst

Samdesk; Edmonton; Hybrid; CAD 70,000 - 100,000; Full time

Benefits offered by this job

Health benefits package including-dent

Hybrid and flexible working schedule

Job summary

samdesk is looking for a Security & Compliance Analyst to join our Infrastructure & Security team. You’ll help run our SOC 2 Type II program, triage vulnerabilities, and respond to security and compliance questions from customers and partners.

You’ll be the second set of hands on our security program, covering compliance obligations and enabling senior engineers to focus on larger initiatives like ISO 27001. You’ll also build AI-assisted workflows to scale security and compliance work.

Qualifications

• 2+ years of experience in information security, GRC, IT audit or a related role.
• Programming or scripting experience (Python preferred), comfortable reading code, working with APIs and automating routine tasks.
• Hands-on experience supporting at least one SOC 2 audit cycle.
• Working knowledge of ISO 27001 requirements and Annex A controls.
• Familiarity with cloud environments (AWS preferred).
• Strong written communication, with the ability to explain controls clearly to technical and non-technical teammates.
• Excellent organization and follow-through when juggling many deadlines and stakeholders.

Responsibilities

• Support our SOC 2 Type II program day to day, including onboarding/offboarding, access reviews, evidence collection, policy upkeep, and case documentation.
• Handle employee software and access requests through our IT service desk, and evaluate new tools against our security standards.
• Conduct security reviews of new and existing vendors.
• Process customer data deletion requests and keep records of each one.
• Review vulnerability reports, triage findings, coordinate patching with engineering, and escalate issues when needed.
• Complete customer security questionnaires, the infosec sections of procurement and RFP responses, and annual security reviews with sales and customer teams.
• Prepare monthly SR&ED and IRAP reporting with engineering and leadership.
• Build and maintain a knowledge base of security and compliance Q&A in Claude, automating repetitive questionnaire/work.
• Contribute to ISO 27001 and ISO 42001 initiatives.

Skills

Python

APIs

SOC 2 audit

ISO 27001

AWS

Communication

Organization

Tools

Vanta

Job description

samdesk is a real-time risk detection and situational awareness platform that identifies the earliest indicators of risk and delivers verified alerts and actionable summaries mapped to your people, assets, and operations. Combining proprietary AI detection with human verification, samdesk consolidates billions of raw signals into clear, context-rich insight. Each alert includes severity, geolocation, visual confirmation, source detail, and proximity to the people and assets that may be affected. AI agents can continuously assess developing incidents against an organization’s policies, SOPs, response playbooks, people, and assets to surface relevant guidance and recommend next steps. This gives security, risk, and safety teams more time to assess exposure, brief stakeholders, coordinate a response, and act before their options narrow, helping organizations protect people, minimize disruption, and keep operations moving.

samdesk is backed by leading global investors and is headquartered in Edmonton, Alberta, with team members in multiple regions including North America, Europe, and Asia Pacific. We are a growing team of dreamers and builders, supporting large global customers around the world.

Check us out!

www.samdesk.io

Who You Are

We’re hiring a Security & Compliance Analyst to join our Infrastructure & Security team. This role has both technical and administrative work. You’ll help run our SOC 2 Type II program day to day, triage vulnerabilities, and answer the growing number of security and compliance questions from our customers and partners.

You’ll be the second set of hands on our security program. That means you’ll provide coverage across our compliance obligations and free up senior team members for larger initiatives such as ISO 27001. You’ll also build AI-assisted workflows that let a small team handle security and compliance work at scale.

What You’ll Do

• Support our SOC 2 Type II program day to day. This includes employee onboarding and offboarding, access reviews, evidence collection, policy upkeep, and case documentation.
• Handle employee software and access requests through our IT service desk, and evaluate new tools against our security standards.
• Conduct security reviews of new and existing vendors.
• Process customer data deletion requests and keep records of each one.
• Review regular vulnerability reports, triage findings, coordinate patching with engineering, and escalte issues when needed.
• Complete customer security questionnaires, the infosec sections of procurement and RFP responses, and annual security reviews in partnership with our sales and customer teams.
• Prepare monthly SR&ED and IRAP reporting with engineering and leadership.
• Build and maintain a knowledge base of past security and compliance answers in Claude, and use it to automate repetitive questionnaire and review work.
• Contribute to new compliance initiatives, including ISO 27001 and ISO 42001

We’re Looking for Someone With

Required

• 2+ years of experience in information security, GRC, IT audit or a related role
• Programming or scripting experience (Python preferred), comfortable reading code, working with APIs and automating routine tasks
• Hands-on experience supporting at least one SOC 2 audit cycle
• Working knowledge of ISO 27001 requirements and Annex A controls
• Familiarity with cloud environments (AWS preferred)
• Strong written communication, with the ability to explain controls clearly to technical and non-technical teammates
• Excellent organization and follow-through when juggling many deadlines and stakeholders

Nice to Have

• Experience with compliance automation platforms such as Vanta
• Experience using LLM tools like Claude or ChatGPT to automate workflows
• A security certification or related training
• Familiarity with SR&ED, IRAP, or other government program reporting
• Experience at a B2B SaaS company

You’ll Thrive Here If

• You take real ownership of the systems and processes you run, and you notice when something is off before anyone asks
• You have a bias toward action, and when a playbook doesn’t exist, you write one

What Are the Perks? What’s In It For You?

• Work at the intersection of AI, public safety, and enterprise technology, with a committed and passionate team of innovators at a fast growing startup.
• Competitive compensation and free access to a health benefits package, including dental, extended health, vision care, and a health spending account.
• Hybrid and flexible working schedule
• A seat on the rocket ship buckle up!

Diversity and Inclusion

samdesk is an equal opportunity employer committed to creating a safe, diverse and inclusive environment. We encourage qualified applicants of all backgrounds including ethnicity, religion, disability status, gender identity, sexual orientation, family status, age, nationality, and education levels to apply. If you are contacted for an interview and require accommodation during the interviewing process, please let us know.

The position is based out of Edmonton, AB but we may also consider remote candidates. Please note that only candidates selected for the interview process will be contacted. Thank you!