Application Security Researcher building autonomous application - security capabilities for OX Security. Researching attack paths, AI models, and detection engines from prototype through production.
About the role
- Information Security Compliance Specialist securing Docebo’s AI-powered learning platform. Driving customer trust, audit readiness, compliance responses, and vendor risk management.
Responsibilities
- Respond to prospect and customer security requests
- Review RFIs and RFQs and provide responses about Docebo's compliance and security posture
- Address customer security questionnaires
- Collaborate internally to establish Corrective Action Plans for outstanding requirements
- Partner with the legal team on Customer Agreements, Terms & Conditions, and Data Processing Addendums
- Map client requirements to standard processes
- Lead and support annual customer audits
- Partner with the GRC team during SOC2, ISO, and NIS2 assessments
- Use AI tools and basic programming to automate internal processes and optimize compliance workflows
- Organize compliance documentation and publish current materials to Docebo trust pages using platforms such as Vanta
- Support third-party vendor risk assessments
- Monitor security controls
- Maintain management reporting dashboards
Requirements
- 4+ years of hands-on experience supporting security activities, audits, and compliance in SaaS environments
- Bachelor's degree in Computer Science or a related field
- Solid working knowledge of AWS, Azure, and GCloud
- Knowledge of GDPR, CCPA, and PIPEDA
- Familiarity with ISO/IEC 27001, 27017, 27018, 27701, 9001, and 42001
- Familiarity with SOC 2, PCI, NIS2, and CFR21 Part 11
- Basic coding skills
- Hands-on experience with Vanta and 1UP
- Exceptional written and verbal English communication skills
- Proactive, adaptable, and passionate about technology, business, and enterprise learning
Benefits
- Employee Share Purchase Plan (ESPP) at a 15% discount
- Competitive compensation package
- Health benefits
- Paid vacation days
- Two company-wide Docebo Days
- Floating holidays for cultural celebrations
- Birthday off
- Family coverage offering time off with children
- Meal voucher for every working day
- Employee Resource Groups including PRIDE, DWA, BIDOC, and Green Ambassadors
- Company-wide events
- Flexible work arrangement with three office days and flexibility the rest of the week
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Managing Norfolk County’s cybersecurity, disaster recovery, incident response, and security projects. Supervising IT security staff and protecting municipal systems, services, and information.
IT Security Officer overseeing information security for Desjardins’ property and casualty insurance sector. Managing risks, vulnerabilities, suppliers, complex projects, and executive security reporting.
Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.