IT Compliance Analyst (Americas, Remote)

About FreshBooks

It turns out… unicorns are real! FreshBooks reached unicorn status after raising our valuation to more than $1 billion, and we couldn’t be more thrilled. But why are we so excited? Because every success at FreshBooks allows us to build better, stronger accounting software and products, worthy of the trust of small business owners everywhere. We’ve expanded beyond our Canadian roots, and now have offices across six countries and counting. Regardless of where we are in the world, we share a common goal: to delight, inspire, and support Business Owners as their businesses grow.

The Opportunity 

FreshBooks Product Security Team is looking for an IT Compliance Analyst to support the growth of our Information Security Program. The Analyst is passionate and knowledgeable about PCI-DSS and SOC2 compliance frameworks. At Freshbooks, you will ensure systems and processes are developed and actioned in alignment with audit standards, client agreements, and internal policies. You will collaborate with stakeholders across the company as a champion of the IT Compliance and Information Security programs.  

What you’ll do as an IT Compliance Analyst at FreshBooks:

• Help build and maintain the IT Compliance program
• Develop and maintain policies, procedures, and other information security related documentation
• Collaborate with internal teams to ensure that appropriate controls are implemented and are operating effectively
• Respond to questions from partners and customers regarding our security posture
• Conduct risk assessments on our third parties
• Key participant in our SOC2 and PCI audits
• Manage audit findings and remediation efforts
• Manage the security awareness programs
• Publish internal communications and act as a point of contact for security related questions

What you’ll bring to the role:

• Hold a Bachelor’s Degree in business, social sciences, or computer science.
• Have a demonstrated ability to learn and succeed in a fast-paced, technical environment with changing priorities.
• Have advanced interpersonal and communication skills (oral and written), proficiency in English.
• Deeply understand information security concepts and IT functions.
• Have experience auditing in cloud environments, familiarity with GCP, AWS and/or Kubernetes.
• Are well versed in IT audit standards such as SOC2 and PCI-DSS
• Are detail oriented and highly organized (experience in project management is considered an asset).

Bonus skills and experience you may bring:

• CISA, CRISC, CISSP, or similar certifications.
• Experience working with SaaS companies in a compliance capacity
• Demonstrated experience in building scalable business processes across departments.

Why Join Us

We're a motivated bunch, with our eyes laser-focused on shipping extraordinary experiences to businesses. You will be surrounded by hardworking team members who share a common vision for what an amazing software company could be, and have the opportunity to help build an elite one from different regions across the globe..

#LI-NN1