ABOUT EARTHDAILY EarthDaily is revolutionizing the way we understand and monitor our planet. Through cutting-edge Earth Observation (EO) technology and geospatial analytics, we provide unparalleled insights for industries ranging from agriculture to mining, insurance, and government intelligence. Our mission is to build the world’s most advanced change detection system to capture, analyze, and interpret global shifts in near real-time.

OUR CREW Our global, distributed team represents a variety of business lines and is made up of business development, sales, marketing and support professionals, data scientists, software engineers, project managers and finance, HR, and IT professionals. We are currently looking for an experienced, Vancouver-based Security & Compliance (S&C;) Manager to join our crew READY TO LAUNCH? Do you want to join the IT team of one of the most exciting space companies at the forefront of global change detection/change monitoring? The S&C; Manager establishes, maintains, and continuously improves EarthDaily’s governance, risk, and compliance program.

This is a Vancouver-based hybrid position, with some in-office work required and occasional travel for audits, team meetings, or vendor assessments.

PREPARE FOR IMPACT Reporting directly to the Director, IT, with a dotted-line reporting relationship to the VP, Finance & Internal Controls, this role owns policy lifecycle management, risk documentation, audit readiness, and compliance evidence collection for IT general controls and related IT compliance obligations.

In addition to driving the company’s broader GRC (Governance, Risk & Compliance) program, including SOC 2, existing compliance certifications, and any future frameworks the business adopts,



this position plays a key role in advancing EarthDaily’s IT general controls supporting SOX 302 and 404, IT inputs to disclosure controls, and cybersecurity governance as it relates to public-company readiness. Success requires self-direction, sound judgment, and persistence in driving cross-functional initiatives forward across IT, Finance/Internal Controls, Legal, HR, and Engineering.

Risk Management and Governance

Own the enterprise risk register, conduct risk assessments, and present findings, mitigation plans, and residual risk levels to decision-makers

Escalate risk acceptance decisions, security variance approvals, and policy exceptions to the appropriate owner (the Director, IT, the VP, Finance & Internal Controls, or executive leadership) based on risk type and organizational impact

Identify gaps in processes, documentation, or controls through stakeholder interviews and process walkthroughs, and take ownership of addressing them, developing procedures and templates as needed

Policy Lifecycle Management

Manage the policy lifecycle across IT and information security policies, and support Finance and Internal Controls in maintaining ICFR-related policies

Adapt policy templates to reflect organizational realities while coordinating annual reviews, version control, and approval tracking





Review contractual agreements for GRC-related requirements and ensure compliance obligations are identified, documented, and tracked

SOX and Public-Company Readiness

Own the IT general controls (ITGC) component of SOX 302 and 404, including scoping, documentation, management testing, deficiency evaluation, and remediation tracking, partnering with Finance and Internal Controls, who own process- and entity-level controls

Provide IT inputs to disclosure controls and procedures (DC&P;), including IT sub-certification processes that support public-company readiness for executive certification requirements

Contribute to cybersecurity disclosure readiness aligned with Item 106 of Regulation S-K and Item 1.05 of Form 8-K

Coordinate periodic tabletop exercises and incident response walkthroughs to validate incident readiness, including readiness for SEC Item 1.05 disclosure timelines, and to test the effectiveness of key controls

Audit Readiness and Compliance Evidence

Collect and organize evidence artifacts to support compliance audits, certification efforts, and public-company readiness activities, leveraging GRC tooling and pulling data directly from systems when needed

Serve as a primary liaison with internal and external auditors and other advisors, coordinating evidence requests, walkthroughs, remediation follow-up, and diligence support

Third-Party Risk and Privacy

Manage third-party risk by coordinating vendor security assessments, collecting attestations, and tracking contract security provisions

Coordinate with regional privacy stakeholders to ensure company-wide alignment on data protection practices

Monitoring, Access Reviews and Reporting

Monitor business and technology initiatives for compliance, cybersecur

📌 Security & Compliance Manager (Vancouver)
🏢 Descartes Labs
📍 Vancouver