Security Compliance & Customer Assurance Analyst
BehavoxRegulatory Compliance company
Ottawa, CanadaMid
Google
Citi
SoftBank Vision Fund
Hercules Capital
SoftBank
HPS Investment Partners
Legal & ComplianceNew
About the role
TL;DR
Executes compliance, assurance, and risk management activities, supporting customer engagements and audits.
- •The Security Compliance & Customer Assurance Analyst owns the execution of defined compliance, customer assurance, risk management, and audit-support activities.
- •The role maintains the internal risk register and the Drata compliance platform by updating control evidence, tracking remediation activities, maintaining audit records, and preparing documentation for internal and external audits in alignment with established security policies and audit requirements.
- •Key Responsibilities Owns assigned security and compliance RFIs and questionnaires from intake through internal review, producing accurate responses supported by approved evidence and documented controls.
- •Coordinates annual customer risk assessments, identifies required inputs, resolves evidence gaps with internal owners, and prepares complete response packages within agreed timelines.
- •Clarifies documented security controls, certifications, and compliance practices during customer calls and records unresolved questions for follow-up by authorized subject-matter owners.
- •Maintains risk records, control evidence, remediation status, and audit documentation in GRC platforms and in approved repositories, ensuring accuracy, traceability, and readiness for review.
- •Uses AI tooling to automate and accelerate approved compliance activities, including initial questionnaire drafting, evidence summarization, and content organization, while validating outputs before internal or customer-facing use.
- •Requirements Applies knowledge of customer due diligence, RFIs, security questionnaires, and annual risk assessments to determine evidence requirements and prepare complete, supportable responses.
- •Interprets applicable control requirements and certification evidence, including SOC 2, ISO 27001, and ISO 42001 (optional), when supporting customer assurance and audit activities.
- •Applies knowledge supported by a recognized ISO 27001 Lead Auditor certification to evidence assessment, control testing, workpaper preparation, gap documentation, and audit-readiness activities.
- •Understands risk identification, risk-register maintenance, control-gap documentation, remediation ownership, status tracking, and closure-evidence requirements.
- •Understands how various AI tools can support evidence analysis, questionnaire drafting, content summarization, and workflow automation while maintaining accuracy, confidentiality, and human review.
Required skills
SOC 2
Domain expertise
cybersecurity
Benefits & perks
equity award, comprehensive health insurance, 30 days annually, public holidays, sick leave
Tech stack
SOC 2
