Privacy and Compliance Analyst

About BIS Safety Software

Since 2006, BIS Safety Software has been developing innovative SaaS solutions based in Sherwood Park, Alberta. Our focus is on helping organizations effectively manage safety, training, compliance, and data integrity. We foster a culture of humility, contribution, and rapid adaptation, offering employees meaningful ownership through an Employee Stock Ownership Plan (ESOP).

Role Overview

We are seeking a proactive and detail-oriented Privacy and Compliance Analyst to join our onsite team. You will be pivotal in steering our Risk & Compliance programs, ensuring alignment with privacy legislation and industry standards. The role involves collaboration with multiple teams to manage projects, advise on compliance matters, and support the expansion and security of our operations.

Key Responsibilities

• Lead and coordinate privacy, security, and compliance initiatives to meet organizational objectives and deadlines.
• Identify and evaluate operational, IT, and data privacy risks, working with cross-functional groups to implement mitigation plans.
• Create, maintain, and improve compliance frameworks, policies, and procedures in accordance with laws such as PIPEDA, COPPA, and GDPR.
• Oversee third-party audits including SOC 2 and PCI DSS, and conduct internal compliance assessments.
• Contribute to strengthening software security controls and risk reduction strategies.
• Manage security incident responses, including investigation, documentation, communication, and remediation efforts.
• Handle compliance-related inquiries and requests, providing timely resolutions and support to internal teams.
• Keep up-to-date with privacy laws and regulatory requirements, translating these into practical policies and operation standards.
• Prepare and deliver clear compliance documentation and reports for stakeholders and auditors.
• Communicate and collaborate with clients, vendors, auditors, and internal personnel to address compliance matters.
• Support compliance training initiatives and promote a culture emphasizing data security and compliance awareness.

Candidate Profile

• Confident and proactive in engaging with stakeholders at various organizational levels.
• Excellent interpersonal skills enabling strong cross-team collaboration.
• Skilled at analyzing complex issues and troubleshooting effectively.
• Able to thrive in dynamic, fast-paced environments managing multiple priorities.
• Energetic and collaborative, thriving in team settings.
• Committed to continuous improvement and innovative problem-solving.
• Strong proficiency with Microsoft 365; an IT background is considered advantageous.

Required Qualifications

• Over 5 years of professional experience in privacy, data security, compliance, and risk management.
• Advanced education in cybersecurity or a related discipline.
• Thorough knowledge of Canadian privacy legislation and compliance requirements.
• Experience in delivering training and developing privacy and compliance policies.
• Project management capabilities; PMP certification is an asset but not mandatory.
• Additional certifications such as CIPP/C or CIPM are advantageous.

Compensation and Benefits

• Participation in Employee Stock Ownership Plan (ESOP).
• Comprehensive medical, dental, and vision insurance coverage.
• Life and disability insurance protections.
• Health spending account available.
• Flexible working hours to accommodate work-life balance.
• Opportunities for professional development and advancement.
• Complimentary on-site parking.

Additional Information

This position requires onsite work at our Sherwood Park, Alberta location. We employ AI tools during recruitment phases to assist with application analysis, but final hiring decisions rest with human evaluators. Salary packages are commensurate with experience and skill set. For inquiries regarding data processing during hiring, please contact us directly.