Cybersecurity Compliance Specialist
Docebo
- Toronto, Canada
- Hybrid
- CA$98K – CA$131K /yr
- Mid Level
- Posted
Responsibilities
- Respond to prospect and customer security requests, review RFIs/RFQs, and deliver flawless responses regarding Docebo's compliance and security posture.
- Tackle customer security questionnaires head-on and collaborate internally to establish Corrective Action Plans (CAPs) for outstanding requirements.
- Partner with the Docebo legal team to review Customer Agreements, Terms & Conditions, and Data Processing Addendums, seamlessly mapping client requirements to standard processes.
- Lead and support annual customer audits while partnering with the GRC team during SOC2, ISO (27001, 9001, 42001), and NIS2 assessments.
- Leverage AI tools and basic programming capabilities to automate internal processes and optimize compliance workflows.
- Organize internal compliance documentation and publish up-to-date materials directly to Docebo’s "trust pages" using platforms like Vanta.
- Support third-party vendor risk assessments, monitor security controls, and maintain management reporting dashboards to mitigate external supplier risks.
Requirements
- 4+ years of hands-on experience supporting security activities, audits, and compliance in SaaS environments, backed by a Bachelor's degree in Computer Science or a related field.
- Deep familiarity with security and compliance standards including ISO/IEC (27001, 27017, 27018, 27701, 9001, 42001), SOC 2, PCI, NIS2, and CFR21 Part 11.
- Basic coding skills and hands-on experience with modern security governance platforms like Vanta and 1UP.
- Exceptional written and verbal English communication skills, with a knack for translating complex technical concepts into clear customer answers.
- Holding certifications such as CISA, CIPP (or CIPT), or CompTIA Security+.
Preferred
- Basic understanding and exposure to the FedRAMP framework.
Evaluate Vendor Risk
🦸 Your Superpowers
Cloud & Privacy Mastery
Solid working knowledge of cloud environments (AWS, Azure, GCloud) alongside data privacy regulations like GDPR, CCPA, and PIPEDA.
Problem-Solver Extraordinaire
Proactive, adaptable, and deeply passionate about the intersection of technology, business, and enterprise learning.
Advanced Academic Background
Specialized degree focus in Information Security or Auditing.
🧭 Our Interview Process
Step 1
We’ll kick things off with a 30-minute video call with a member of our Talent team. We’ll get to know you, share more about the role and team, and make sure we’re aligned.
Step 2
A 60-minute video call with the hiring manager, where they’ll dig deeper into your experience, approach, and what excites you most about this opportunity.
Step 3
A 45-minute practical case study/technical discussion with key members of the Compliance & GRC team.
Step 4
A final 30-minute chat with our Security Leadership team to discuss long-term vision, growth, and team alignment.
Our Hybrid Work Philosophy 🤝
Great work can happen anywhere but coming together helps us go further. Our team spends three days a week in the office (Tuesday-Thursday) to collaborate, solve problems, and learn from each other. With flexibility the rest of the week, it’s a balance designed to help everyone do their best work and keep growing.
Our Total Rewards Philosophy
Our Total Rewards Philosophy centers around three core areas to reward and care for our People:
Rewarding Impact
We lead with competitive pay to reward the impact, skills and traits that fuel our success.
Fostering Holistic Wellbeing
We care deeply about and invest in the whole person with programs that support our people’s physical, mental, and financial well-being.
Empowering Our Talent Culture
We build a culture of trust and empowerment by designing our rewards and benefits with transparency, equity, and flexibility, enabling our people to do their best work and stay for the long haul.
Financial Wellness
Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package.
Your Well-Being, Covered
You’ll get access to health benefits, so you can get the care you need when you need it.
Rest, Relax, Repeat
- Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off!
- Family First: We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025!
Fuel for Your Day
Receive a meal voucher for every working day, so you can focus on doing your best work while enjoying a meal that keeps you energized.
Connections That Count
Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long.
