Compliance Analyst

At CoLab, we help mechanical engineering teams bring life-changing products to market years sooner. Our product, CoLab, is the world’s first Design Engagement System (DES) - a category defining product that engineering teams use to engage in meaningful, productive design conversations, catch preventable mistakes, and get to market faster. Our customers include the largest engineering organizations in the world such as Ford, Johnson Controls, Komatsu, and Polaris in the industrial equipment, consumer products, automotive, aerospace & defense, and shipbuilding industries.

As a Compliance Analyst you will play a key role in the development, implementation, and maintenance of CoLab’s Compliance Programs. You will be an essential member of the security team bringing your knowledge, passion, and experience to contribute meaningfully to CoLab’s purpose in this hands-on role that requires a high degree of organization to maintain compliance.

What you’ll do:

• Ensure control documentation is maintained and organized appropriately within CoLab’s GRC platform;
• Monitor CoLab’s compliance activities to ensure compliance deadlines and requirements are met;
• Assist with the preparation and scheduling of auditor walkthrough sessions with control owners;
• Participate in compliance audits, including preparing documentation and responding to auditor requests;
• Confidently respond to auditor follow up inquiries and collect requested control evidence;
• Champion the completion of customer security questionnaires under tight timelines;
• Create and maintain documentation to meet compliance requirements;
• Work with Security and IT to prioritize and complete operational tasks.

Who you are:

• 0-3+ years of professional, hands-on experience supporting the development, implementation and maintenance of compliance programs;
• Familiarity of compliance frameworks such as SOC 2, ISO 27001, Domestic and International Export Controls (CGP/ITAR), NIST 800-171, Cybersecurity Maturity Model Certification (CMMC) and TISAX;
• Experience with GRC platforms such as One Trust or Vanta;
• Demonstrated ability to plan and complete work self-sufficiently within tight deadlines;
• Ability to review and interpret technical documentation, regulatory reference materials and compliance frameworks;
• Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams;
• This role will deal frequently with highly confidential information, requiring the successful completion of enhanced background checks and Government of Canada security clearance.

The extra details:

• Compensation: This is a full-time, permanent position with a competitive compensation package that includes a stock options package.
• Benefits: This role offers an extended health and benefits package that includes unlimited paid vacation and RRSP matching.
• Remote/Hybrid Work: Our main office location is in St. John’s, NL where we offer hybrid and remote opportunities. This role has the flexibility to work from anywhere within Canada.