Company Overview Trulioo invites you to be a catalyst for change in the digital identity verification industry. As the global front‑runner, we redefine how businesses grow, innovate and comply online. We enable organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Trulioo verifies more than 5 billion people and 700 million business entities across 195 countries and is proud to be recognized as a BC Top Employer.

What We Offer Comprehensive benefits for full‑time, permanent employees: health, dental, vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend. Flexible hybrid working setting with hybrid model, weekly lunches, coffee, and social events. Wellness programs and a Headspace subscription.

Employee Resource

Groups supporting diversity and inclusion.

Position Summary The Information Security & Compliance Analyst supports and strengthens Trulioo’s information security and compliance programs. Reporting to the Manager, Compliance & Risk, the analyst coordinates compliance initiatives, manages audit activities, and helps maintain certifications such as ISO 27001 and SOC 2. The role involves cross‑functional collaboration with Legal, Privacy, IT, Cloud & Information Security, Operations, Finance, and People teams.

The analyst drives continuous improvement across the Information Security Management System (ISMS).

Responsibilities - Coordinate ISO 27001:2022 ISMS processes: internal and external audits, annual Control Self Assessments, post‑audit reporting and remediation.

- Coordinate SOC 2 auditing processes.




- Lead general compliance audits and reviews of policy violations or non‑compliance areas, and contribute to information security project reviews.
- Lead external party on‑site audits as required.
- Contribute to Finance team audits by providing evidence and documentation.
- Manage the annual information security policy review and improvement process.
- Administer GRC workflows.
- Contribute to employee awareness of the ISMS, including best practices in data privacy and protection; occasionally lead onboarding training.
- Monitor emerging compliance standards and regulations and summarize impacts.
- Support Legal and Privacy with contract reviews and redlines from an ISC perspective.
- Support responses to client due diligence, RFI/RFP requests, and external party audits.
- Respond to information security and compliance inquiries; elevate issues as appropriate.
- Identify compliance and data protection deficiencies, facilitate solutions, and raise non‑compliance via corporate risk processes.
- Provide incident coordination services; contribute to root‑cause analysis and remediation.
- Manage Third‑Party Risk Management activities: supplier/service onboarding due diligence and annual reassessments.
- Lead Trulioo’s Security Due Diligence Outreach processes.
- Plan, present, minute,



and report on quarterly Security Committee meetings to the executive team.
- Contribute to ad‑hoc initiatives such as information security metrics, attendance compliance tracking, and cross‑functional risk/gap assessments. What You’ll Bring - 2‑4 years of operations, compliance, risk management or internal audit experience.
- 2‑4 years of audit experience, ISO 27001 or similar, or data privacy education/certification (e.g., Certified Internal Auditor, ISO/IEC 27001 Lead Auditor, CIPP/C or E).
- Experience with GRC tools (OneTrust, ServiceNow GRC, Archer, etc.).
- Strong written and verbal communication skills.
- Excellent attention to detail.
- Ability to manage projects and priorities independently, and to lead audit and review processes end‑to‑end.
- Ability to conduct root‑cause analysis and pinpoint improvement areas.
- Understanding of current legislation/regulation issues and developments globally.
- Proficiency in leveraging AI language models (ChatGPT, Claude, etc.) to streamline workflows and improve productivity.

Benefits - Health, dental, vision coverage.

- Retirement plans with company match.
- Paid time off, parental leave, annual education & training stipend.
- Flexible hybrid working environment.
- Wellness workshops, events and Headspace subscription.
- Employee Resource Groups for diversity and inclusion.

Equal Opportunity Trulioo strongly encourages applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations and life experiences to apply. We welcome applications from people with disabilities and offer support upon request for all aspects of the selection process.

📌 Compliance Analyst (Vancouver)
🏢 Doist
📍 Vancouver