SOC 2 Type II and vulnerability triage define this Security Compliance Analyst role at samdesk, based in Edmonton with remote consideration.
As part of the Infrastructure & Security team, you will support daily security and compliance operations. The work combines access reviews, evidence collection, vendor assessments, and customer security responses. You will also coordinate vulnerability patching and maintain compliance records.
Key Responsibilities:
- Support employee onboarding, offboarding, access reviews, and evidence collection
- Review vendor security and evaluate tools against standards
- Triage vulnerability findings and coordinate engineering patching
- Complete customer questionnaires and annual security reviews
- Maintain policies,
case documentation, and deletion records
Requirements:
- Two or more years in information security, GRC, or IT audit
- Experience supporting at least one SOC 2 audit cycle
- Working knowledge of ISO 27001 requirements and Annex A
- Python or scripting experience with APIs and automation
- Familiarity with AWS or other cloud environments
Apply security operations, SOC 2 support, vulnerability triage, and transparent communication within samdesk’s growing Infrastructure & Security team.