Who we are:

Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities.

Geotab is advancing security, connecting commercial vehicles to the internet and providing web-based analytics to help customers better manage their fleets. Geotab’s open platform and Geotab Marketplace ®, offering hundreds of third-party solution options, allows both small and large businesses to automate operations by integrating vehicle data with their other data assets. Processing billions of data points a day, Geotab leverages data analytics and machine learning to improve productivity, optimize fleets through the reduction of fuel consumption, enhance driver safety and achieve strong compliance to regulatory changes.

Our team is growing and we’re looking for people who follow their passion, think differently and want to make an impact. Ours is a fast paced, ever changing environment. Geotabbers accept that challenge and are willing to take on new tasks and activities - ones that may not always be described in the initial job description. Join us for a fulfilling career with opportunities to innovate, great benefits, and our fun and inclusive work culture. Reach your full potential with Geotab. To see what it’s like to be a Geotabber, check out our blog and follow us @InsideGeotab on Instagram.

Who you are:

The Senior Information Security, Risk and Compliance Specialist collaborates with cross-functional teams at Geotab to ensure security compliance, promote security best practices, and mitigate security risk throughout the organization. Key accountabilities include leading and overseeing internal and external security audits against systems, processes, and network infrastructure, managing compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP, developing and maintaining security policies, standards, and governance documentation, conducting hands-on technical security risk and supply chain risk assessments, assessing and managing third-party and vendor security risk across the organization.

What you'll do:

How you'll make an impact:

Provide information assurance and subject matter expertise in support of panels, committees, and working groups.
Ensure security compliance with legal and regulatory standards including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP.
Lead and oversee internal and external security audits against systems, processes, and network infrastructure; coordinate evidence collection, auditor liaison, and remediation tracking.
Develop, update, and revise information security policies, standards, and procedures.
Serve as a subject matter expert in security risk management with hands-on experience in technical security risk assessments and supply chain risk assessments.
Assess and manage third-party and vendor security risk including vendor assessments and ongoing monitoring.
Collaborate with and advise internal departments to improve security-related risks and embed security controls into business processes.
Act as a technical mentor and SME to junior team members; serve as a point of escalation for complex security issues and initiatives.
Continuously develop expertise across Geotab's security programs, internal systems, and data infrastructure, leveraging that knowledge to provide informed, practical security consulting to business and technical stakeholders.
Adopt and champion the use of AI tools and techniques to enhance security workflows, automate compliance tasks, and improve risk analysis capabilities; proactively learn and apply evolving AI capabilities.
Support Geotab global strategic initiatives and contribute to the maintenance of the departmental SOPs.
Consistently demonstrate Geotab's Core Values in all daily work and interactions.

What you'll bring to the role:

5-8 years of experience in security evaluation/analysis and/or risk assessments within a technology-focused industry.
Working knowledge of system and network security engineering best practices.
Deep familiarity with security compliance frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, NIST SP 800-171, and FedRAMP; including certification/accreditation processes and industry reporting requirements.
Experience leading end-to-end security audits including planning, evidence collection, auditor liaison, and remediation tracking.
Demonstrated experience in third-party and supply chain risk management programs.
Expertise in common security tool use and GRC platforms.
High accuracy and meticulous attention to detail; able to work under pressure and respond to fast-changing priorities and deadlines.
Highly organized with the ability to manage multiple tasks and projects simultaneously.
Excellent verbal and written communication skills, including comfort with delivering presentations and training.
Strong interpersonal and relationship-building skills; a strong team player able to engage with all levels of the organization.
Strong analytical skills with the ability to problem-solve with well-judged decisions.
Strategic mindset with a keen sense of priorities and the ability to pivot as the landscape changes.
Technical competence using software programs including Google Suite for Business (Sheets, Docs, Slides).
Entrepreneurial mindset; comfortable in a flat organization.
Willingness to adopt and learn AI tools to streamline security and compliance workflows; open to integrating AI-driven insights into risk analysis, audits and decision-making.
Post-Secondary Diploma/Degree specialization in Computer Science, Engineering, or a related field.
Equivalent combination of education and/or work experience in related field may be substituted.
Professional certification in Information Security from a reputable institution highly valued (e.g., CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor, ISO 42001, certifications).
5-8 years of required previous experience in security evaluation/analysis, risk assessments, and/or compliance within a technology-focused industry.

If you got this far, we hope you're feeling excited about this role! Even if you don't feel you meet every single requirement, we still encourage you to apply.

Please note: Geotab does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to Geotab employees.

This posting is for an existing vacancy.

Why job seekers choose Geotab:

Flex working arrangements
Home office reimbursement program
Baby bonus & parental leave top up program
Online learning and networking opportunities
Electric vehicle purchase incentive program
Competitive medical and dental benefits
Retirement savings program

*The above are offered to full-time permanent employees only

How we work:

At Geotab, we have adopted a flexible hybrid working model in that we have systems, functions, programs and policies in place to support both in-person and virtual work. However, you are welcomed and encouraged to come into our beautiful, safe, clean offices as often as you like. When working from home, you are required to have a reliable internet connection with at least 50mb DL/10mb UL. Virtual work is supported with cloud-based applications, collaboration tools and asynchronous working. The health and safety of employees are a top priority. We encourage work-life balance and keep the Geotab culture going strong with online social events, chat rooms and gatherings. Join us and help reshape the future of technology!

We believe that ensuring diversity is fundamental to our future growth and progress and is an integral part of our business. We believe that success happens where new ideas can flourish – in an environment that is rich in diversity and a place where people from various backgrounds can work together. Geotab encourages applications from all qualified individuals. We are committed to accommodating people with disabilities during the recruitment and assessment processes and when people are hired. We will ensure the accessibility needs of employees with disabilities are taken into account as part of performance management, career development, training and redeployment processes. If you require accommodation at any stage of the application process or want more information about our diversity and inclusion as well as accommodation policies and practices, please contact us at careers@geotab.com. By submitting a job application to Geotab Inc. or its affiliates and subsidiaries (collectively, “Geotab”), you acknowledge Geotab’s collection, use and disclosure of your personal data in accordance with our Privacy Policy. Click here to read our Privacy Notice.

The annual base salary for this position is the expected annual salary for this role, and may be subject to change. Geotab offers various perks and benefits and other compensation components that an individual may be eligible for. The actual base salary for this position depends on a variety of factors such as but not limited to skills, qualifications, education and overall experience, including the location the applicant lives while performing the job. This also includes equity with other team members and alignment with local market data. All offers of employment are contingent upon proof of eligibility to work and the individual's ability to pass a background check.

Hiring Range

$104,400—$135,700 CAD

Senior Information Security, Risk & Compliance Specialist

About the role