Senior Information Security Compliance Analyst

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Motorola Solutions is a global leader in mission-critical communications and analytics. We innovate to deliver solutions that keep people safe and businesses thriving. Our commitment to security and data protection is at the core of everything we do, and we are looking for a talented Senior Information Security Compliance Analyst to join our team and help drive our project success. The security and compliance group focuses on implementing and operating security compliance programs and are proficient in all things security compliance.

The Senior Security Compliance Analyst is responsible for supporting the organization's efforts to maintain compliance with applicable regulatory, statutory, and contractual requirements, as well as internal security policies and standards. The role involves supporting assessments, monitoring compliance activities, assisting with risk management, and helping stakeholders ensure the organization’s information security posture aligns with industry best practices and frameworks. The ideal candidate will be a self-starter, have a foundational understanding of compliance frameworks, strong analytical skills, and the ability to communicate effectively. Candidates should be able to perform daily job duties under general guidance while maintaining a high level of due diligence throughout their work.

Key Responsibilities:

• Compliance Management: Assist in ensuring the organization complies with relevant regulatory requirements (e.g., GDPR, NIS2, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS). Maintain existing information security policies, standards, and guidelines. Participate in regular audits and assessments to identify gaps and ensure adherence to compliance frameworks. Partner with Legal on contract updates needed to maintain compliance and risk posture.
• Risk Assessment and Mitigation: Participate in risk assessments to evaluate potential security threats and vulnerabilities. Assist cross-functional teams in remediating compliance gaps and reducing risks. Track and manage risk exceptions, ensuring appropriate documentation and approvals.
• Audit Support: Support the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits. Assist in preparing and providing evidence to demonstrate compliance with applicable standards and requirements. Monitor and track the completion of audit findings and corrective actions. Partner with the ISO ISPMS Leads to facilitate regular management update(s), highlighting compliance changes, integrity adherence and stakeholder updates.
• Continuous Improvement: Stay informed of changes in regulatory and compliance requirements, as well as industry trends. Assist in recommending and implementing improvements to the compliance program. Support the development and enhancement of security and compliance tools, processes, and frameworks.
• Security Program Execution: Contribute to proactive risk mitigation through Threat Modeling results and Post-Security Reviews (PSRs). Assist in the maintenance of key security operations documents, such as Incident Response Plans, runbooks, Incident Management, and Business Continuity/Disaster Recovery plans. Coordinate and review results from Penetration Testing. Support the development of the Information Security strategy and roadmap. Track and report on compliance with critical international regulations, such as the EU CRA and EU Radio Equipment Directive. Maintain and update the organizational Risk Register as part of the broader Risk Management program.

Preferred Knowledge:

• Familiarity with EU and UK compliance regulations, laws and frameworks.

Qualifications:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; or equivalent work experience.
• 4+ years of experience in information security, compliance, or related roles.
• Experience supporting compliance efforts related to regulatory requirements and industry frameworks (e.g., GDPR, HIPAA, ISO 27001, NIST, SOC 2, PCI DSS).
• Foundational understanding of risk assessment methodologies, control frameworks, and compliance requirements.
• Familiarity with compliance management tools and GRC platforms.
• Proficiency in assisting with audit preparation and remediation plans.
• Familiarity with cloud security and third-party risk management.
• Comfortable using AI tools to support compliance efforts.
• Relevant entry-level certifications (e.g., CompTIA Security+, ISACA CSX Fundamentals, CISA, CISM, CISSP).

Target Base Salary Range: $110,000 - 140,000 CAD