At a Glance
- Tasks: Lead security and compliance initiatives to protect our planet-monitoring tech.
- Company: Join EarthDaily, a pioneering space company transforming global change detection.
- Benefits: Competitive salary, full benefits, flexible time off, and hybrid work options.
- Other info: Collaborative team environment with opportunities for growth and development.
- Why this job: Make a real impact in a mission-driven company focused on sustainability.
- Qualifications: 5+ years in IT security or compliance; relevant certifications preferred.
The predicted salary is between 130000 - 150000 $ per year.
ABOUT EARTHDAILY
EarthDaily is revolutionizing the way we understand and monitor our planet. Through cutting-edge Earth Observation (EO) technology and geospatial analytics, we provide unparalleled insights for industries ranging from agriculture to mining, insurance, and government intelligence. Our mission is to build the world’s most advanced change detection system to capture, analyze, and interpret global shifts in near real-time.
OUR CREW
Our global, distributed team represents a variety of business lines and is made up of business development, sales, marketing and support professionals, data scientists, software engineers, project managers and finance, HR, and IT professionals. We are currently looking for an experienced, Vancouver-based Security & Compliance (S&C) Manager to join our crew!
READY TO LAUNCH?
The S&C Manager establishes, maintains, and continuously improves EarthDaily’s governance, risk, and compliance program. This is a Vancouver-based hybrid position, with some in-office work required and occasional travel for audits, team meetings, or vendor assessments.
PREPARE FOR IMPACT!
Reporting directly to the Director, IT, with a dotted-line reporting relationship to the VP, Finance & Internal Controls, this role owns policy lifecycle management, risk documentation, audit readiness, and compliance evidence collection for IT general controls and related IT compliance obligations.
In addition to driving the company’s broader GRC (Governance, Risk & Compliance) program, including SOC 2, existing compliance certifications, and any future frameworks the business adopts, this position plays a key role in advancing EarthDaily’s IT general controls supporting SOX 302 and 404, IT inputs to disclosure controls, and cybersecurity governance as it relates to public-company readiness.
Success requires self-direction, sound judgment, and persistence in driving cross-functional initiatives forward across IT, Finance/Internal Controls, Legal, HR, and Engineering.
Risk Management and Governance
- Own the enterprise risk register, conduct risk assessments, and present findings, mitigation plans, and residual risk levels to decision-makers.
- Escalate risk acceptance decisions, security variance approvals, and policy exceptions to the appropriate owner based on risk type and organizational impact.
- Identify gaps in processes, documentation, or controls through stakeholder interviews and process walkthroughs, and take ownership of addressing them, developing procedures and templates as needed.
Policy Lifecycle Management
- Manage the policy lifecycle across IT and information security policies, and support Finance and Internal Controls in maintaining ICFR-related policies.
- Adapt policy templates to reflect organizational realities while coordinating annual reviews, version control, and approval tracking.
- Review contractual agreements for GRC-related requirements and ensure compliance obligations are identified, documented, and tracked.
SOX and Public-Company Readiness
- Own the IT general controls (ITGC) component of SOX 302 and 404, including scoping, documentation, management testing, deficiency evaluation, and remediation tracking.
- Provide IT inputs to disclosure controls and procedures (DC&P), including IT sub-certification processes that support public-company readiness for executive certification requirements.
- Contribute to cybersecurity disclosure readiness aligned with Item 106 of Regulation S-K and Item 1.05 of Form 8-K.
- Coordinate periodic tabletop exercises and incident response walkthroughs to validate incident readiness.
Audit Readiness and Compliance Evidence
- Collect and organize evidence artifacts to support compliance audits, certification efforts, and public-company readiness activities.
- Serve as a primary liaison with internal and external auditors and other advisors, coordinating evidence requests, walkthroughs, remediation follow-up, and diligence support.
Third-Party Risk and Privacy
- Manage third-party risk by coordinating vendor security assessments, collecting attestations, and tracking contract security provisions.
- Coordinate with regional privacy stakeholders to ensure company-wide alignment on data protection practices.
Monitoring, Access Reviews and Reporting
- Monitor business and technology initiatives for compliance, cybersecurity, and controls implications.
- Coordinate periodic privileged access reviews, user access certifications, and other recurring IT general control activities.
- Generate compliance metrics, remediation status, and readiness reports, presenting findings, risks, and recommendations to leadership.
YOUR PAST MISSIONS
- Bachelor’s degree in Information Security, Computer Science, Business Administration, Accounting, or related field; relevant professional experience and certifications may substitute for formal education.
- Relevant professional certifications such as CISA, CRISC, CISSP, CISM, or CGRC are preferred.
- 5+ years of experience in IT security, risk management, compliance, or audit roles.
- 3+ years of direct experience with GRC programs, policy management, or audit preparation.
- Demonstrated experience working with industry-recognized security and compliance frameworks.
YOUR TOOLKIT
- Strong knowledge of common security and compliance frameworks.
- Working knowledge of the COSO 2013 Internal Control – Integrated Framework.
- Working knowledge of identity and access management platforms.
- Self-sufficient and highly organized, with the ability to manage multiple concurrent workstreams.
- Excellent written and verbal communication skills.
YOUR COMPENSATION
Base Salary Range: $130,000 to $150,000 CAD annually. The range is based on Vancouver, BC-derived compensation for this role.
OUR SPACE
We're love to welcome you to our world of software for space. This is a hybrid role, with some ongoing, in-office work and collaboration required.
WHY EARTHDAILY ANALYTICS?
- Competitive compensation, full benefits and flexible time off.
- Be part of a meaningful mission as part of one of Canada’s most innovative space companies.
- Work from home opportunities (hybrid).
- Great work environment, team and one of the best office locations in Vancouver.
Security & Compliance Manager in Vancouver employer: Descartes Labs
EarthDaily is an exceptional employer that offers a dynamic work environment in the heart of Vancouver, where employees can contribute to groundbreaking Earth Observation technology. With competitive compensation, comprehensive benefits, and a strong emphasis on employee growth through meaningful projects, team collaboration, and flexible work arrangements, EarthDaily fosters a culture of innovation and sustainability. Join us to be part of a mission-driven team that not only values your contributions but also supports your professional development in one of Canada's most exciting industries.
