What you will be doing:
Security Operations
Own Opal's internal security program across people, systems, devices, vendors, and office environments
Manage security tooling for endpoint protection, SSO, MFA, access reviews, logging, monitoring, and alerting
Lead security incident response, including triage, investigation, remediation, communications, and follow-up
Run internal access reviews and improve least-privilege practices across company systems
Manage physical and digital access controls for the office and internal tools
Compliance & Risk
Drive SOC 2 compliance work, including control ownership, evidence collection, audit readiness, and auditor coordination
Maintain security policies, procedures, exceptions, control documentation, and audit evidence
Track security risks and drive practical remediation based on business impact
Help turn security and compliance requirements into repeatable operating processes
Vendor Security & Vulnerability Management
Own vendor security reviews as part of Opal's procurement process
Manage ongoing third-party risk, including review cycles, evidence collection, and remediation follow-up
Manage Opal's security vendor: set priorities, review deliverables, escalate issues, and hold them accountable
Own bug bounty / vulnerability disclosure program operations, including intake, triage coordination, SLA tracking, and reporting
Coordinate vulnerability remediation across security vendors, engineering, legal, and business stakeholders
IT Oversight via MSP
Manage Opal's IT MSP relationship and ensure IT execution supports security and compliance requirements
Coordinate secure onboarding/offboarding across accounts, hardware, access, and device posture
Hold the MSP accountable for device management, helpdesk, network support, and office infrastructure
Oversee office network and A/V decisions, including UniFi networking with VLAN segmentation
Evaluate whether MSP scope needs to change as Opal grows
What you must have:
5+ years of experience in security operations, GRC, IT security, or a similar security-focused role
Experience owning or materially driving a company security program
Strong familiarity with SOC 2; FedRAMP, ISO 27001, or similar frameworks are a plus
Experience with incident response, endpoint security, access reviews, logging/monitoring, and remediation tracking
Strong understanding of identity and access concepts: SSO, MFA, least privilege, access reviews, and joiner/mover/leaver processes
Experience managing security vendors, consultants, auditors, or other external partners
Comfort managing IT operations through an MSP or similar external provider
Strong written and verbal communication skills
Ability to operate independently, prioritize risk, and drive cross-functional follow-through in a startup environment
Salary/Rate Range: $150.00 -$200.00
Thank you for your interest in this opportunity. If you are selected to move forward in the process, we will contact you directly. If you do not hear from us, we encourage you to continue visiting our website for other roles that may be a good fit.
Compliance and Security Lead • Vancouver, BC
Gowling WLG seeks an Information Security Compliance Analyst to lead compliance initiatives in a mostly remote capacity.Manage security risks, audits, and policy adherence while collaborating with ... Voir plus
A leading technology solutions provider is seeking a Senior Associate to drive their cybersecurity posture and end-user technology strategy.The role requires strong operational leadership and the a... Voir plus
Education: Secondary (high) school graduation certificate.Experience: 2 years to less than 3 years.Education: Secondary (high) school graduation certificate.Experience: 2 years to less than 3 years... Voir plus
Our Krakenites are a world-class team with crypto conviction, united by our desire to discover and unlock the potential of crypto and blockchain technology.Kraken is a mission-focused company roote... Voir plus
A leading wealth management firm in Canada seeks a Senior Compliance Officer to oversee compliance activities and promote a culture of compliance.The ideal candidate will have over 5 years of exper... Voir plus
We are looking for a Security Specialist to investigate incidents, conduct audits, support sales with high‑value packages, and collaborate across departments to minimize risk.Investigate incidents ... Voir plus
A healthcare technology company is seeking an experienced Security Architect responsible for designing and implementing security within their architecture.The role involves collaborating with cross... Voir plus
A leading cybersecurity firm is seeking a Security Compliance Analyst to ensure information systems comply with security standards.Key responsibilities include conducting audits, developing complia... Voir plus
At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice, and solutions.They help organisations navigate complex regulat... Voir plus
A leading investment firm in Vancouver is seeking a Senior Compliance & Operations Officer to lead compliance programs and oversee investor onboarding processes.This role demands regulatory experti... Voir plus
Governance, Risk & Compliance Consultant.Governance, Risk & Compliance Consultant.We are a premier cybersecurity consultancy, blending advanced offensive and defensive strategies to safeguard our c... Voir plus
IEM is seeking an EHS Compliance Specialist for its Surrey, B.The position is entirely on-site, focusing on safety and compliance initiatives.This role requires 5-10 years of EHS experience, prefer... Voir plus
Do you have a passion for the world of controls? Would you enjoy the diversity of having a variety of clients to assist with their success? Whether currently working for a firm or in industry, do y... Voir plus
Security Governance, Risk and Compliance Specialist.Having recognized the advantages of remote work, such as improved employee morale, increased productivity, and positive impacts on both employee ... Voir plus
Heli-One Canada is looking for a HESS & Compliance Specialist responsible for driving Health, Environment, Safety, and Security (HESS) performance across the site by implementing safety programs, e... Voir plus
Shape project delivery practices as a Lead Advisor at Colliers Project Leaders, specializing in Integrated Project Delivery (IPD).Leverage Lean principles for effective project implementation and c... Voir plus
A security solutions provider in Metro Vancouver is seeking a Sales Representative to promote and sell security alarm systems.The ideal candidate will identify potential customers, customize securi... Voir plus
A major electricity provider in Vancouver seeks an IT Advisor specializing in Cybersecurity Risk and Compliance.The candidate will lead oversight of cybersecurity compliance processes, develop acti... Voir plus
Radius Security’s commitment to delivering reliable, innovative, and customer-focused security solutions.This position is responsible for day-to-day troubleshooting, programming, testing, and optim... Voir plus
Lead the charge in security and efficiency with a role as a Technology Manager in IAM.This remote-first position allows you to leverage your expertise in managing identity and access systems effect... Voir plus
){kind=logo}
