Senior Information Security, Risk & Compliance Specialist

About this role

Who we are:

Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities.

Geotab is advancing security, connecting commercial vehicles to the internet and providing web-based analytics to help customers better manage their fleets. Geotab’s open platform and Geotab Marketplace ®, offering hundreds of third-party solution options, allows both small and large businesses to automate operations by integrating vehicle data with their other data assets. Processing billions of data points a day, Geotab leverages data analytics and machine learning to improve productivity, optimize fleets through the reduction of fuel consumption, enhance driver safety and achieve strong compliance to regulatory changes.

Our team is growing and we’re looking for people who follow their passion, think differently and want to make an impact. Ours is a fast paced, ever changing environment. Geotabbers accept that challenge and are willing to take on new tasks and activities - ones that may not always be described in the initial job description. Join us for a fulfilling career with opportunities to innovate, great benefits, and our fun and inclusive work culture. Reach your full potential with Geotab. To see what it’s like to be a Geotabber, check out our blog and follow us @InsideGeotab on Instagram.

Who you are:

The Senior Information Security, Risk and Compliance Specialist collaborates with cross-functional teams at Geotab to ensure security compliance, promote security best practices, and mitigate security risk throughout the organization. Key accountabilities include leading and overseeing internal and external security audits against systems, processes, and network infrastructure, managing compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP, developing and maintaining security policies, standards, and governance documentation, conducting hands-on technical security risk and supply chain risk assessments, assessing and managing third-party and vendor security risk across the organization.

What you'll do:

The Senior Information Security, Risk and Compliance Specialist collaborates with cross-functional teams at Geotab to ensure security compliance, promote security best practices, and mitigate security risk throughout the organization. Key accountabilities include leading and overseeing internal and external security audits against systems, processes, and network infrastructure, managing compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP, developing and maintaining security policies, standards, and governance documentation, conducting hands-on technical security risk and supply chain risk assessments, assessing and managing third-party and vendor security risk across the organization.

How you'll make an impact:

•
Provide information assurance and subject matter expertise in support of panels, committees, and working groups.

•
Ensure security compliance with legal and regulatory standards including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP.

•
Lead and oversee internal and external security audits against systems, processes, and network infrastructure; coordinate evidence collection, auditor liaison, and remediation tracking.

•
Develop, update, and revise information security policies, standards, and procedures.

•