IT Security Analyst

Hey you! 👋  Want to work for one of the fastest growing SaaS companies in the world? 📈We’re building the next generation of learning software that companies like AWS, Netflix, Opentable and L’Oreal rely on to deliver training 💻 We believe learning is for everyone, and that we all have something we can learn from each other. We rely on one another to continuously innovate our products and processes to create an exceptional experience for our employees, customers and partners.
Still not sure? We are a culture where values are at the center of everything we do. We also embody what we call the Docebo Heart. We trust our teammates, assume the best of one another, and also hold space for all the differences that make us better. 💙
So what are you waiting for? Apply today! Join 800+ global Docebians and change the way people learn. 
Are you ready to be a part of the learning revolution? 🚀
About This Opportunity:
The IT Security Analyst works collaboratively to support Docebo's risk and compliance activities across a broad range of frameworks, including NIST, GDPR, PCI, ISO, SOC, SOX and FEDRAMP. The role will be primarily responsible for supporting customer-facing communication and responses and conducting internal risk assessments. The IT Security Analyst has a proactive mindset and approach, a strong technical understanding, and is an excellent communicator. 
Location: Toronto Reports to: Security Business Enablement Manager

Responsibilities:

• Review customer-facing security requests, and compile recommended responses. 
• Respond to customer security questionnaires, and identify outstanding customer requirements that need to be addressed with Corrective Action Plans (CAP’s).
• Conduct third-party vendor risk assessment activities to evaluate the risk of Docebo’s supply chain.
• Conduct risk assessment activities according to the appropriate framework.
• Prepare draft reports and other management reporting deliverables. 
• Conducts additional information gathering and risk assessments as needed; documents and reports results.
• Maintain risk management reporting dashboards and metrics in order to keep information complete, accurate, and current. Prepare and assist with the delivery of risk assurance reports to management.
• Other duties as assigned or requested.

Requirements:

• Bachelor’s degree in computer science or related field.
• Working knowledge of the OSI Model.
• 2+ years supporting audit and compliance activities.
• Knowledge of information security principles, trends, and best practices.
• Knowledge of GDPR requirements and implementation techniques.
• Experience building and using risk assessment processes.
• Effective communication and presentation skills.
• Excellent English communication skills
• Love the intersection of technology, business, and learning.

Preferred Requirements:

• Bachelor’s degree in computer science, Information Security, or Auditing.
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Privacy Professional (CIPP)
• Certified Information Systems Security Professional (CISSP)
• IAPP CIPP or CIPT
• CompTIA Security+
• FedRamp framework hands-on knowledge

Benefits & Perks 😍-Inclusive and flexible work environment-Generous Vacation Policy, plus 2 extra floating holidays to use for religious or cultural events that matter to you-Employee Share Purchase Plan-Career progression/internal mobility opportunities-Four employee resource groups to get involved with (the Docebo Women's Alliance, PRIDE, BIDOC, and Green Ambassadors)

About Docebo 💙Here at Docebo, we power learning experiences for over 3000 customers around the world with our easy-to-use, AI-powered Suite designed to close the enterprise learning loop. We have successfully achieved 2 IPOs (TSX: DCBO & NASDAQ: DCBO), been recognized as a Top SaaS e-learning Solution, and are growing exponentially in the process.Docebo is a global company with offices in North America, EMEA, APAC and more. Our people believe in six core values, simply defined and manifested in everything we do - Innovation, Simplicity, Accountability, Togetherness, Curiosity, and Impact. If this sounds like you, now is your time to join one of the fastest-growing learning technology companies on the market. Apply today!
Docebo is an Equal Employment Opportunity employer. We are committed to diversity and inclusion in our workforce. All qualified applicants and employees will receive consideration for employment regardless of their race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, citizenship status, age, disability, genetic information, or any other category protected under applicable law.
Any individuals requiring a reasonable accommodation to assist with their job search or application for employment should send an e-mail to recruiting_accommodations (at) docebo.com. The e-mail should include a description of the requested accommodation and the position you’re applying for or interested in.