Who we are:

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking an amazing Commercial Security Operations Analyst who has a strong high-level technical background, as well as the ability to articulate technical concepts in terms that are easily comprehensible to both business managers and customers, while addressing their security-related inquiries and requests.

What you'll do:

As the Commercial Security Operations Analyst you'll play a vital role in responding to customer RFPs, security questionnaires, and other inquiries, while documenting existing business processes and associated information systems that necessitate high levels of functional integration. This position collaborates with company business units and technical teams, gaining an understanding of their security standards and procedures, and providing process, policy, and technical solutions to address and support those needs by leveraging the Commercial Security Operations Analysts expertise.

How you'll make an impact

• Respond to customer RFPs, security questionnaires, and other inquiries by working closely with internal business units to gather relevant information and provide comprehensive and accurate responses.

• Conduct customer meetings to discuss and address security-related questions, concerns, and requirements. Demonstrate strong communication skills and the ability to articulate technical security concepts in an easily understandable manner to facilitate productive discussions and ensure customer confidence in the proposed solutions. Provide expert guidance and support to customers in managing their security risks and aligning their security measures with industry best practices.

• Oversee and manage security certifications (ISO27001, SOC2 and other) and audits against the systems, processes, and network infrastructure according to existing security policies and standards.

• Provide information assurance and subject matter expertise as required in support of panels, committees, and working groups.

• Assist with internal security impact analysis tasks and other operational items. 

• Generate security requirements documents outlining the solution in business terms, and create clear requirements to enable application development. Document elicitation results and validate that security requirements are understood, agreed upon, and signed off by stakeholders.

• Supplement security requirements with detailed use cases, business process diagrams, wireframes, and workflow diagrams to illustrate business needs and security concerns.

• Develop test cases for new designs to validate the security process and system solution, and execute testing for bug fixes and new capabilities being released.

• Provide analysis of security processes and workflows with suggestions for improvement. Identify areas where process, policy, or system changes can lead to increased security, efficiency, and productivity. Support the creation and maintenance of security systems, business processes, end-user, and Standard Operating Procedures (SOP) documentation.

What you'll bring to the role

• 3 -5 years of required experience in Business analysis experience working with stakeholders within a cross-functional matrix environment. Familiarity with information security documentation requirements, certification and accreditation processes, and abreast with general reporting requirements for industry security standards (e.g. ISO 27001, NIST SP 800-53). Expertise in common security tool use. Project Management experience is a strong plus.

• Demonstrated ability to effectively communicate security-related concepts to both technical and non-technical stakeholders. Experience working in cross-functional teams to enhance security posture and drive security initiatives.

• Possess a high-level understanding of security, particularly in the areas of compliance and application security. Leverage this expertise to effectively guide customers through the process of implementing robust security measures, meeting regulatory requirements, and ensuring the secure development and deployment of applications within their organizations.

• Excellent analytical and writing skills, to evaluate the information gathered from multiple sources, reconcile conflicts, decompose high-level information into details, abstract up from low-level information to a more general understanding, distinguish solution ideas from requirements, and distinguish user requests from underlying needs.

• Experience in requirements management, including collecting, documenting, analyzing, tracing, validating, prioritizing and controlling change.

• Experience gathering and preparing level-of-effort estimates, use cases, test cases and plans.

• Able to work well under pressure and respond to fast changing priorities and deadlines.

• Highly organized and able to manage multiple tasks and projects simultaneously.

• Excellent verbal and written communication skills.

• Strong analytical skills with the ability to problem solve well-judged decisions.

• A strong team-player with the ability to engage with all levels of the organization.

• Technical competence using software programs, including, but not limited to, Google Suite for business (Sheets, Docs, Slides).

• Entrepreneurial mindset and comfortable in a flat organization.

• Preferred Professional certification (e.g. CISSP, CCSP, CISM) in Information Security from a reputable institution highly valued.

Why job seekers choose Geotab

Flex working arrangements
Home office reimbursement program
Baby bonus & parental leave top up program
Online learning and networking opportunities
Electric vehicle purchase incentive program
Competitive medical and dental benefits
Retirement savings program

*The above are offered to full-time permanent employees only

How we work

Other employment statements:

Geotab will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.