Information Security Compliance Associate - Case IQ

Case IQ is a leading B2B SaaS company in the governance, risk, and compliance (GRC) space, helping organizations build safer, more accountable workplaces. We offer a comprehensive suite of solutions that enable organizations to move from reactive approaches to proactive risk management. Our software helps teams across compliance, HR, legal, and investigations report, manage, investigate, and prevent workplace risk - including ethics violations, fraud, harassment, discrimination, security incidents, and third-party issues - so they can better protect their people, culture, and business.

Backed by over 25 years of domain expertise and trusted by Fortune 500 companies, Case IQ has supported the management of millions of cases and helped mitigate billions in financial and reputational risk.

Role Summary

We are looking for an Information Security Compliance Associate to support Case IQ 's security, privacy, and compliance program under the direction of the Director of Information Security. This remote-first role is a strong fit for an early-career professional who is interested in information security, compliance, audit support, and documentation within a growing security program.

In this role, you will help maintain policies and compliance documentation, support customer and vendor security questionnaires, organize audit evidence, assist with security and compliance tools, and work cross-functionally with IT, Security, and internal stakeholders to support established security controls and processes.

While the role is remote, we are seeking candidates based in the Ottawa area.

What You'll Do

• Support the company’s security and compliance program under the direction of the Director of Information Security
• Maintain and update security, privacy, and compliance policies and documentation
• Assist with customer and vendor security questionnaires, including evidence collection
• Support internal and external audits by organizing evidence, tracking requests, and coordinating with internal teams
• Help manage and operate compliance and security tools (e.g., GRC platforms, monitoring tools)
• Track changes to security and regulatory requirements and flag potential impacts
• Partner with IT and Security teams to support systems for network, endpoint, and user controls (e.g., EDR, MDM)
• Respond to security and compliance inquiries from internal and external stakeholders

What Success Looks Like

• 30 Days: Complete onboarding, role-specific training, and required security/compliance expectations. Build context on Case IQ ’s security program, compliance obligations, audit processes, DPA reviews, security awareness training, tools, documentation standards, and key internal stakeholders. Complete initial policy reviews and basic updates, audit support activities, and assigned questionnaires.
• 60 D