[Hiring] Senior Information Security Compliance Analyst @Motorola Solutions

Role Description

The Senior Security Compliance Analyst is responsible for supporting the organization's efforts to maintain compliance with applicable regulatory, statutory, and contractual requirements, as well as internal security policies and standards. The role involves:

• Supporting assessments and monitoring compliance activities.
• Assisting with risk management.
• Helping stakeholders ensure the organization’s information security posture aligns with industry best practices and frameworks.
• Performing daily job duties under general guidance while maintaining a high level of due diligence.

Key Responsibilities

• Compliance Management:
  • Assist in ensuring the organization complies with relevant regulatory requirements (e.g., GDPR, NIS2, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS).
  • Maintain existing information security policies, standards, and guidelines.
  • Participate in regular audits and assessments to identify gaps and ensure adherence to compliance frameworks.
  • Partner with Legal on contract updates needed to maintain compliance and risk posture.
• Risk Assessment and Mitigation:
  • Participate in risk assessments to evaluate potential security threats and vulnerabilities.
  • Assist cross-functional teams in remediating compliance gaps and reducing risks.
  • Track and manage risk exceptions, ensuring appropriate documentation and approvals.
• Audit Support:
  • Support the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits.
  • Assist in preparing and providing evidence to demonstrate compliance with applicable standards and requirements.
  • Monitor and track the completion of audit findings and corrective actions.
  • Partner with the ISO ISPMS Leads to facilitate regular management update(s), highlighting compliance changes, integrity adherence, and stakeholder updates.
• Continuous Improvement:
  • Stay informed of changes in regulatory and compliance requirements, as well as industry trends.
  • Assist in recommending and implementing improvements to the compliance program.
  • Support the development and enhancement of security and compliance tools, processes, and frameworks.
• Security Program Execution:
  • Contribute to proactive risk mitigation through Threat Modeling results and Post-Security Reviews (PSRs).
  • Assist in the maintenance of key security operations documents, such as Incident Response Plans, runbooks, Incident Management, and Business Continuity/Disaster Recovery plans.
  • Coordinate and review results from Penetration Testing.
  • Support the development of the Information Security strategy and roadmap.
  • Track and report on compliance with critical international regulations, such as the EU CRA and EU Radio Equipment Directive.
  • Maintain and update the organizational Risk Register as part of the broader Risk Management program.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; or equivalent work experience.
• 4+ years of experience in information security, compliance, or related roles.
• Experience supporting compliance efforts related to regulatory requirements and industry frameworks (e.g., GDPR, HIPAA, ISO 27001, NIST, SOC 2, PCI DSS).
• Foundational understanding of risk assessment methodologies, control frameworks, and compliance requirements.
• Familiarity with compliance management tools and GRC platforms.
• Proficiency in assisting with audit preparation and remediation plans.
• Familiarity with cloud security and third-party risk management.
• Comfortable using AI tools to support compliance efforts.
• Relevant entry-level certifications (e.g., CompTIA Security+, ISACA CSX Fundamentals, CISA, CISM, CISSP).

Requirements

• Bachelor’s degree.
• 4+ years of experience in information security, compliance, or related roles.

Benefits

• Target Base Salary Range: $110,000 - 140,000 CAD.
• Pay within this range varies and depends on job-related knowledge, skills, and experience.
• The actual offer will be based on the individual candidate.

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.