SOC 2 Type II and vulnerability triage define this Security and Compliance Analyst role with samdesk’s Infrastructure and Security team. Hybrid work is available in Edmonton, Alberta, or remotely.
You will support samdesk’s day-to-day security program while helping scale compliance work. The position combines access reviews, evidence collection, vendor assessments, and customer security responses. You will also coordinate vulnerability remediation and contribute to ISO 27001 and ISO 42001 initiatives.
Key Responsibilities:
Maintain SOC 2 Type II activities, evidence, policies, and cases
Review vulnerabilities and coordinate patching with engineering
Conduct security reviews for current and existing vendors
Complete customer questionnaires, procurement responses,
and annual reviews
Build Claude knowledge workflows for repetitive compliance work
Requirements:
Two or more years in information security, GRC, or IT audit
Programming or scripting experience, preferably Python
Hands-on experience supporting at least one SOC 2 audit
Working knowledge of ISO 27001 and Annex A controls
Familiarity with cloud settings, preferably AWS
Apply your SOC 2, vulnerability management, scripting, and compliance skills to samdesk’s growing security program.
J-18808-Ljbffr