Senior Information Security Compliance Analyst

Motorola Solutions; Ottawa; Hybrid; CAD 110,000 - 140,000; Full time

Job summary

Motorola Solutions is seeking a Senior Information Security Compliance Analyst in Ottawa to support regulatory, contractual, and internal security compliance programs. You will assist with assessments, audits, policy maintenance, and risk remediation while coordinating with Legal and ISO leads.

The role requires 4+ years in security/compliance, knowledge of GDPR/NIST/ISO frameworks, and familiarity with cloud security and GRC tools.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or related field.
• 4+ years in information security, compliance, or related roles.
• Experience with GDPR, HIPAA, ISO 27001, NIST, SOC 2, PCI DSS.
• Familiarity with cloud security and third-party risk management.

Responsibilities

• Assist in ensuring regulatory and contractual compliance with GDPR, NIS2, CCPA/CPRA, ISO 27001, SOC 2, NIST CSF, PCI DSS.
• Support risk assessments and remediation of compliance gaps with cross-functional teams.
• Aid audits and provide evidence for regulatory and client assessments; track corrective actions.
• Help maintain security policies, runbooks, incident response plans and BC/DR plans.
• Monitor changes in regulations and tools; contribute to the security strategy and roadmap.

Skills

Regulatory compliance

Risk assessment

Audit support

GRC tools

Cloud security

AI in compliance

Education

Bachelor’s degree in Information Security / CS / IT

Tools

GRC platforms

Audit tooling

Cloud security tools

Job description

## Senior Information Security Compliance AnalystApply: Ontario,Canada Offsite: Ottawa, Canada: Vancouver, Canada: Full time: Posted Today: R68515## **Company Overview**At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.**Aperçu de l’entreprise**Chez Motorola Solutions, nous pensons que tout commence par nos employés. Nous sommes une communauté mondiale soudée, unie par la volonté incessante de contribuer à la sécurité des personnes partout dans le monde. Nous concevons et connectons des technologies qui contribuent à protéger les personnes, les biens et les infrastructures. Nos solutions favorisent la collaboration essentielle pour améliorer la sécurité des populations, des écoles, des hôpitaux, des entreprises et, finalement, des nations. Connectez-vous à une carrière qui compte et aidez-nous à bâtir un avenir plus sûr.## **Department Overview**Motorola Solutions is a global leader in mission-critical communications and analytics. We innovate to deliver solutions that keep people safe and businesses thriving. Our commitment to security and data protection is at the core of everything we do, and we are looking for a talented Senior Information Security Compliance Analyst to join our team and help drive our project success. The security and compliance group focuses on implementing and operating security compliance programs and are proficient in all things security compliance.## Job DescriptionThe Senior Security Compliance Analyst is responsible for supporting the organization's efforts to maintain compliance with applicable regulatory, statutory, and contractual requirements, as well as internal security policies and standards. The role involves supporting assessments, monitoring compliance activities, assisting with risk management, and helping stakeholders ensure the organization’s information security posture aligns with industry best practices and frameworks. The ideal candidate will be a self-starter, have a foundational understanding of compliance frameworks, strong analytical skills, and the ability to communicate effectively. Candidates should be able to perform daily job duties under general guidance while maintaining a high level of due diligence throughout their work. **Key Responsibilities:**### **Compliance Management*** Assist in ensuring the organization complies with relevant regulatory requirements (e.g., GDPR, NIS2, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS).* Maintain existing information security policies, standards, and guidelines.* Participate in regular audits and assessments to identify gaps and ensure adherence to compliance frameworks.* Partner with Legal on contract updates needed to maintain compliance and risk posture### **Risk Assessment and Mitigation:*** Participate in risk assessments to evaluate potential security threats and vulnerabilities.* Assist cross-functional teams in remediating compliance gaps and reducing risks.* Track and manage risk exceptions, ensuring appropriate documentation and approvals.### **Audit Support:*** Support the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits.* Assist in preparing and providing evidence to demonstrate compliance with applicable standards and requirements.* Monitor and track the completion of audit findings and corrective actions.* Partner with the ISO ISPMS Leads to facilitate regular management update(s), highlighting compliance changes, integrity adherence and stakeholder updates.### **Continuous Improvement:*** Stay informed of changes in regulatory and compliance requirements, as well as industry trends.* Assist in recommending and implementing improvements to the compliance program.* Support the development and enhancement of security and compliance tools, processes, and frameworks.### **Security Program Execution:*** Contribute to proactive risk mitigation through Threat Modeling results and Post-Security Reviews (PSRs).* Assist in the maintenance of key security operations documents, such as Incident Response Plans, runbooks, Incident Management, and Business Continuity/Disaster Recovery plans.* Coordinate and review results from Penetration Testing.* Support the development of the Information Security strategy and roadmap.* Track and report on compliance with critical international regulations, such as the EU CRA and EU Radio Equipment Directive.* Maintain and update the organizational Risk Register as part of the broader Risk Management program. **Preferred Knowledge:*** Familiarity with EU and UK compliance regulations, laws and frameworks. **Qualifications:*** Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; or equivalent work experience.* 4+ years of experience in information security, compliance, or related roles.* Experience supporting compliance efforts related to regulatory requirements and industry frameworks (e.g., GDPR, HIPAA, ISO 27001, NIST, SOC 2, PCI DSS).* Foundational understanding of risk assessment methodologies, control frameworks, and compliance requirements.* Familiarity with compliance management tools and GRC platforms.* Proficiency in assisting with audit preparation and remediation plans.* Familiarity with cloud security and third-party risk management.* Comfortable using AI tools to support compliance efforts.* Relevant entry-level certifications (e.g., CompTIA Security+, ISACA CSX Fundamentals, CISA, CISM, CISSP) Target Base Salary Range: $110,000 - 140,000 CAD