Security and Compliance Analyst

samdesk Canada Inc.; Edmonton; Hybrid; CAD 75,000 - 110,000; Full time

Benefits offered by this job

Health benefits package including DHV/

Hybrid and flexible working schedule

Growth and learning opportunities

Job summary

samdesk Canada Inc. is hiring a Security & Compliance Analyst to join our Infrastructure & Security team. You will help run the SOC 2 Type II program, triage vulnerabilities, and answer security and compliance questions from customers and partners.

You’ll support compliance obligations and help scale security workflows using AI-assisted automation. You will be the second line of defense, expanding coverage across ISO 27001 initiatives and other programs, while collaborating with sales and

Qualifications

• 2+ years in information security, GRC, IT audit or related role.
• Programming or scripting experience (Python preferred).
• Hands-on experience supporting at least one SOC 2 audit cycle.
• Familiarity with ISO 27001 requirements and Annex A controls.
• Familiarity with cloud environments (AWS preferred).
• Strong written communication and ability to explain controls clearly.

Responsibilities

• Support SOC 2 Type II program day to day including onboarding/offboarding, access reviews, evidence collection and policy upkeep.
• Handle IT service desk requests and evaluate new tools against security standards.
• Conduct security reviews of vendors and process deletion requests.
• Triage vulnerability reports and coordinate patching with engineering.

Skills

Security & GRC

Python

SOC 2

ISO 27001

AWS

Communication

Organization

Job description

Who We Are

samdesk is a real-time risk detection and situational awareness platform that identifies the earliest indicators of risk and delivers verified alerts and actionable summaries mapped to your people, assets, and operations. Combining proprietary AI detection with human verification, samdesk consolidates billions of raw signals into clear, context-rich insight. Each alert includes severity, geolocation, visual confirmation, source detail, and proximity to the people and assets that may be affected. AI agents can continuously assess developing incidents against an organization’s policies, SOPs, response playbooks, people, and assets to surface relevant guidance and recommend next steps. This gives security, risk, and safety teams more time to assess exposure, brief stakeholders, coordinate a response, and act before their options narrow, helping organizations protect people, minimize disruption, and keep operations moving.

samdesk is backed by leading global investors and is headquartered in Edmonton, Alberta, with team members in multiple regions including North America, Europe, and Asia Pacific. We are a growing team of dreamers and builders, supporting large global customers around the world.

Check us out! www.samdesk.io

Who You Are

We’re hiring a Security & Compliance Analyst to join our Infrastructure & Security team. This role has both technical and administrative work. You’ll help run our SOC 2 Type II program day to day, triage vulnerabilities, and answer the growing number of security and compliance questions from our customers and partners.

You’ll be the second set of hands on our security program. That means you’ll provide coverage across our compliance obligations and free up senior team members for larger initiatives such as ISO 27001. You’ll also build AI-assisted workflows that let a small team handle security and compliance work at scale.

What You’ll Do

• Support our SOC 2 Type II program day to day. This includes employee onboarding and offboarding, access reviews, evidence collection, policy upkeep, and case documentation.
• Handle employee software and access requests through our IT service desk, and evaluate new tools against our security standards.
• Conduct security reviews of new and existing vendors.
• Process customer data deletion requests and keep records of each one.
• Review regular vulnerability reports, triage findings, coordinate patching with engineering, and elevate issues when needed.
• Complete customer security questionnaires, the infosec sections of procurement and RFP responses, and annual security reviews in partnership with our sales and customer teams.
• Prepare monthly SR&ED and IRAP reporting with engineering and leadership.
• Build and maintain a knowledge base of past security and compliance answers in Claude, and use it to automate repetitive questionnaire and review work.
• Contribute to new compliance initiatives, including ISO 27001 and ISO 42001

We’re Looking for Someone With

Required

• 2+ years of experience in information security, GRC, IT audit or a related role
• Programming or scripting experience (Python preferred), comfortable reading code, working with APIs and automating routine tasks
• Hands-on experience supporting at least one SOC 2 audit cycle
• Working knowledge of ISO 27001 requirements and Annex A controls
• Familiarity with cloud environments (AWS preferred)
• Strong written communication, with the ability to explain controls clearly to technical and non-technical teammates
• Excellent organization and follow-through when juggling many deadlines and stakeholders

Nice to Have

• Experience with compliance automation platforms such as Vanta
• Experience using LLM tools like Claude or ChatGPT to automate workflows
• A security certification or related training
• Familiarity with SR&ED, IRAP, or other government program reporting
• Experience at a B2B SaaS company

You’ll Thrive Here If

• You take real ownership of the systems and processes you run, and you notice when something is off before anyone asks
• You have a bias toward action, and when a playbook doesn’t exist, you write one

What Are the Perks? What’s In It For You?

• Work at the intersection of AI, public safety, and enterprise technology, with a committed and passionate team of innovators at a fast growing startup.
• Competitive compensation and free access to a health benefits package, including dental, extended health, vision care, and a health spending account.
• Hybrid and flexible working schedule
• A seat on the rocket ship buckle up!

Diversity and Inclusion

samdesk is an equal opportunity employer committed to creating a safe, diverse and inclusive environment. We encourage qualified applicants of all backgrounds including ethnicity, religion, disability status, gender identity, sexual orientation, family status, age, nationality, and education levels to apply. If you are contacted for an interview and require accommodation during the interviewing process, please let us know.

The position is based out of Edmonton, AB but we may also consider remote candidates. Please note that only candidates selected for the interview process will be contacted. Thank you.