We take a market-based and data-driven approach to compensation. We leverage data from trusted third-party compensation sources to help us understand the market value of a role based on function, level, location, and scope. Please view the base salary range for this role below.

The range listed is our expected compensation for the role. However, the pay offered may vary depending on a variety of factors including qualifications, job-related knowledge, skills, experience, and location. Are you ready to embark on a career that truly affects people around the world?

Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud.

Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace.

Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite.

What We Offer We provide a robust benefits package for full time, permanent employees.

- health coverage - dental coverage - vision coverage - retirement plans with company match - paid time off - parental leave - annual education & training stipend (equivalent to $1,000 in local currency) Specific benefits may vary by location and will be discussed further during the interview process.

Flexible Hybrid Working

Environment - weekly lunches - quality coffee - regular social events - parent rooms - on-site gyms - comfortable lounges - adaptable workstations Wellness We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized.

Employee Resource Groups

Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization.

Position Summary The Information Security & Compliance Analyst plays a key role in supporting and strengthening Trulioo's information security and compliance programs. Reporting to the Manager, Compliance & Risk,



this role is responsible for coordinating compliance initiatives, managing audit activities, and helping maintain certifications such as ISO 27001 and SOC 2. Working cross-functionally with Legal, Privacy, IT, Cloud & Information Security, Operations, Finance, and People teams, the Analyst helps ensure regulatory and customer requirements are met while driving continuous improvement across the organization's Information Security Management System (ISMS).

This role combines technical compliance knowledge, project coordination, and stakeholder collaboration to support risk management, third-party assurance, security governance, and employee awareness. The ideal candidate is detail-oriented, proactive, and passionate about helping build and maintain a strong culture of information security and compliance. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3-days per week in the office).

What You'll Be Doing - Coordinate the ISO 27001:2022 information security management system processes, including:

- Internal and external ISO audits for all Trulioo locations and services in scope - Annual Control Self Assessments in preparation for audits - Post-audit reporting and remediation processes - Lead general compliance audits and reviews of processes for policy violation / non-compliance areas, and contribute to information security project reviews - Lead external party on-site audits as required - Contribute to the Finance team's audits by providing evidence and documentation as requested - Manage the annual information security policy review and improvement process - Contribute to employee awareness of the ISMS, information security, and compliance, including best practices in data privacy and protection, and occasionally lead onboarding training - Monitor emerging compliance standards and regulations and summarize potential impacts for the Compliance Manager.
- Support Legal and Privacy with contract reviews and redlines from an ISC perspective - Support responses to client due diligence, RFI / RFP requests, and contribute to external party on-site audits as required - Support internal teams by responding to information security and compliance inquiries and escalating issues as appropriate.
- Contribute to the identification of compliance and data protection deficiencies or opportunities for improvement,



and facilitate the development of solutions - Contribute to raising any identified non-compliance via the corporate risk and non-conformity processes - Provide incident coordination services as needed - Contribute to root cause analysis of security incidents and remediation - Help manage Third Party Risk Management activities, including supplier/service onboarding due diligence and annual reassessments - Lead Trulioo's Security Due Diligence Outreach processes - Plan, present, minute, and report on the quarterly Security Committee meeting to the executive team - Contribute to ad-hoc initiatives such as information security metrics and objectives, attendance compliance tracking, and cross-functional risk/gap assessments What You'll Bring - 2 - 4 years of operations, compliance, risk management or internal audit experience - 2 - 4 years of audit experience, with ISO 27001 or similar, or data privacy education or certification. e.g.

Certified Internal

Auditor, ISO/IEC 27001 Lead Auditor, CIPP/C or -/E - Experience with GRC tools (OneTrust, ServiceNow GRC, Archer, etc.) - Strong written and verbal communication skills - Excellent attention to detail - Ability to manage projects and priorities independently, and to lead audit and review processes end-to-end - Ability to conduct root cause analysis reviews and pinpoint areas for improvement - Understanding of current legislation/regulation issues and developments globally - Proficient in leveraging AI language models (ChatGPT, Claude, etc.) to streamline workflows and improve productivity Interview Process At Trulioo, we strive to create an interview experience that is transparent, engaging, and respectful of your time. Our process is designed to help us learn more about your skills and experience while giving you insight into our team, culture, and the impact of the work we do. Here’s what you can expect throughout the interview process: Final Leadership Interview: 30 minutes Thriving at Trulioo At Trulioo, you’re not just an employee.

You’re a valued member of our Trulicrew on a journey of professional and personal growth with a world-class organization. With Trulioo, you have the power to revolutionize the intersection of technology, digital trust and online identity to open the global economy to everyone. Together, we can shape the digital future.

We’re on the lookout for exceptional people to empower with trust, autonomy and the freedom to cultivate their potential. Your curiosity, meticulous attention to detail and passion to contribute are highly valued. Trulioo welcomes applications from people with disabilities.

Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time-to-time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility.

Privacy Notice

As part of our job application process, Trulioo collects, processes, and discloses personal data for the purpose of identifying suitable candidates for our job openings. For more detail, please visit Trulioo's Website Privacy Policy in the section "When you apply for a job".

📌 Compliance Analyst (Vancouver)
🏢 Trulioo Information Services
📍 Vancouver