Security Compliance Analyst SOC 2

SOC 2 Type II and vulnerability triage define this Security and Compliance Analyst role with samdesk’s Infrastructure and Security team. Hybrid work is available in Edmonton, Alberta, or remotely.

You will support samdesk’s day-to-day security program while helping scale compliance work. The position combines access reviews, evidence collection, vendor assessments, and customer security responses. You will also coordinate vulnerability remediation and contribute to ISO 27001 and ISO 42001 initiatives.

Key Responsibilities:

• Maintain SOC 2 Type II activities, evidence, policies, and cases
• Review vulnerabilities and coordinate patching with engineering
• Conduct security reviews for new and existing vendors
• Complete customer questionnaires, procurement responses, and annual reviews
• Build Claude knowledge workflows for repetitive compliance work

Requirements:

• Two or more years in information security, GRC, or IT audit
• Programming or scripting experience, preferably Python
• Hands-on experience supporting at least one SOC 2 audit
• Working knowledge of ISO 27001 and Annex A controls
• Familiarity with cloud environments, preferably AWS

Apply your SOC 2, vulnerability management, scripting, and compliance skills to samdesk’s growing security program.