Job DescriptionToast is recruiting on behalf of a fast growing B2B SaaS company in the competitive intelligence space. The company uses AI to turn market, competitor, and buyer signals into insights that revenue teams can act on, helping organizations win more competitive deals. Based in Vancouver with hubs in other major cities, the team is small, globally distributed, and scaling quickly, having grown through several recent acquisitions. They are looking for a Security and Compliance Lead to own how the organization protects data, manages risk, and builds trust with customers as it scales.ResponsibilitiesServe as the internal expert on security, guiding teams and customers through reviews and removing blockers along the wayOwn the SOC 2 Type 2 audit process end to end, including evidence collection, auditor coordination, and continuous improvementOversee the company's privacy framework, manage subprocessor relationships, and ensure compliance with regulations like GDPR and CCPALead incident response efforts, including maintaining and testing business continuity and disaster recovery plansPartner with IT and Engineering to embed security into systems and processes as the company growsBuild security awareness across the organization through training and ongoing educationRequirementsExperience in information security, risk, privacy, and compliance, ideally within a B2B SaaS or cloud-native environmentHands-on experience managing SOC 2 Type 2 audits,



from control implementation through auditor coordinationStrong working knowledge of security frameworks such as SOC 2, ISO 27001, and NIST, and privacy regulations like GDPR and CCPAExcellent communication skills, with the ability to respond to complex security questionnaires and translate technical concepts for any audienceSound judgment and pragmatism, knowing when to enforce controls and when to enable reasonable risk takingA hands-on, get-things-done mindset that can flex between strategic and tactical workAbility to work independently and drive progress across teams without direct authorityIndustry certifications such as CISSP, CISM, or CIPP/E would be an assetExperience partnering with Legal on privacy and security terms in contracts or data protection agreements is a plusFamiliarity with cloud environments such as AWS, GCP, or Azure is considered an assetAn interest in how AI can enhance security and compliance work would be a plusBenefitsCompetitive salary aligned with experience, plus participation in an employee stock option plan for all full-time employeesComprehensive extended health and dental coverage starting on day oneFlexible, take-the-time-you-need vacation policyDirect access to company leadership, including regular touchpoints with the CEOWorking at the center of a growing market category, with the chance to shape how a quick-scaling company protects the trust of its customers and partnersJoining a small, high-impact team where this hire's decisions on compliance and risk directly influence the company's ability to win and retain enterprise customers#J-18808-Ljbffr

📌 Security & Compliance Lead (Winnipeg)
🏢 Emterra Group
📍 Winnipeg