Senior Information Security, Risk & Compliance Specialist

The Senior Information Security, Risk and Compliance Specialist collaborates with cross-functional teams at Geotab to ensure security compliance, promote security best practices, and mitigate security risk throughout the organization. Key accountabilities include leading and overseeing internal and external security audits against systems, processes, and network infrastructure, managing compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP, developing and maintaining security policies, standards, and governance documentation, conducting hands-on technical security risk and supply chain risk assessments, assessing and managing third-party and vendor security risk across the organization.

The Senior Information Security, Risk and Compliance Specialist collaborates with cross-functional teams at Geotab to ensure security compliance, promote security best practices, and mitigate security risk throughout the organization. Key accountabilities include leading and overseeing internal and external security audits against systems, processes, and network infrastructure, managing compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP, developing and maintaining security policies, standards, and governance documentation, conducting hands-on technical security risk and supply chain risk assessments, assessing and managing third-party and vendor security risk across the organization.

• Provide information assurance and subject matter expertise in support of panels, committees, and working groups.

• Ensure security compliance with legal and regulatory standards including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP.

• Lead and oversee internal and external security audits against systems, processes, and network infrastructure; coordinate evidence collection, auditor liaison, and remediation tracking.

• Develop, update, and revise information security policies, standards, and procedures.

•  Serve as a subject matter expert in security risk management with hands-on experience in technical security risk assessments and supply chain risk assessments.

• Assess and manage third-party and vendor security risk including vendor assessments and ongoing monitoring.

• Collaborate with and advise internal departments to improve security-related risks and embed security controls into business processes.

• Act as a technical mentor and SME to junior team members; serve as a point of escalation for complex security issues and initiatives.

• Continuously develop expertise across Geotab's security programs, internal systems, and data infrastructure, leveraging that knowledge to provide informed, practical security consulting to business and technical stakeholders.

• Adopt and champion the use of AI tools and techniques to enhance security workflows, automate compliance tasks, and improve risk analysis capabilities; proactively learn and apply evolving AI capabilities.

• Support Geotab global strategic initiatives and contribute to the maintenance of the departmental SOPs.

• Consistently demonstrate Geotab's Core Values in all daily work and interactions.