Risk and Compliance Team Lead

BIS Safety Software is a SaaS company on a mission to change how organizations manage safety, learning, and compliance. Since 2006, we've been building an innovative software solution in a space where trust and data integrity matter. As we grow, so does the need to strengthen how we manage risk, protect client data, and meet evolving regulatory standards. We are expanding our team and are looking to add a Risk and Compliance Team Lead who excels in risk management and compliance.

About the Role

You'll lead a small team, set priorities, and build the frameworks and processes that keep our business, our clients, and our data protected . This role sits at the intersection of security, privacy, and operations - working across teams to identify risks, close gaps, and ensure our software meets the standards our clients depend on.

This is a hands-on leadership role. You'll set direction for the function while staying close to the work , and you'll have real influence over how compliance and risk management grow at BIS. If you are particular about the particulars, enjoy building things that didn't exist before and making the things that do exist work better, this is a strong fit.

This role is based in the Mountain Standard Time (MST) zone. For candidates located in the Edmonton area, this is an onsite position based out of our Sherwood Park office. For exceptional candidates located outside the region, we are open to discussing remote or periodic travel arrangements, provided they can effectively collaborate within MST business hours.

In This Role, You Will Be Expected To:

• Lead the Risk and Compliance Function: Provide direction, structure, and oversight to ensure effective execution of all compliance and risk initiatives.


• Identify, Assess, and Mitigate Risks: Partner with teams to proactively identify, assess, and address operational, IT, and data privacy risks.


• Collaborate Cross-Functionally: Work with developers, customer support, and team leads to close gaps and implement effective risk mitigation strategies.


• Build and Improve Compliance Frameworks: Develop, maintain, and continuously enhance frameworks, processes, and procedures aligned with evolving standards and regulations (PIPEDA, COPPA, GDPR).


• Strengthen Software Security: Lead and support software updates to improve security controls and maintain regulatory compliance.


• Lead Audits and Assessments: Coordinate third-party audits and conduct internal assessments, including SOC 2 and PCI DSS.


• Manage Security Incidents: Oversee incident response, including investigation, reporting, communication, and remediation.


• Report and Communicate: Prepare and present clear compliance reports and documentation for internal and external stakeholders.


• Deliver Training and Awareness: Promote a strong culture of data security through training and team enablement.


• Lead and Develop the Team: Mentor team members, support their growth, and build accountability within the function.


• Engage with Clients and Vendors: Act as a key point of contact to meet security and compliance requirements.

You Might Be the Right Fit If You:

• Experience leading a team or function, with a track record of developing people, setting priorities, and driving accountability.


• Proven ability to work effectively across technical and non-technical teams to drive alignment and results.


• Comfortable operating as both a strategic leader and hands-on contributor - able to set direction for the function while staying close to the work.


• Excel in managing multiple tasks and projects simultaneously.


• Demonstrate excellent communication, reporting, and presentation skills.


• Possess strong analytical skills to evaluate and improve complex processes.


• Have strong proficiency in Microsoft 365, with an interest in IT and technology (IT background is an asset).

Qualifications we are looking for:

• 6+ years of experience in privacy, data security, compliance, and risk management.


• Postgraduate education in cybersecurity or a related field.


• Strong understanding of Canadian privacy laws and regulations.


• Experience in providing training and developing policy documents related to privacy and compliance.


• Project management experience; PMP certification is a strong asset but not required.


• Bonus points if you have a CIPP/C, CIPM, or other relevant privacy/security certifications

Compensation and benefits:

• Employee Stock Ownership Plan (ESOP)


• Full medical, dental, and vision coverage


• Life insurance and disability insurance


• Health spending account


• Flexible working hours


• On-the-job training and growth opportunities


• Free on-site parking

$100,000 - $120,000 a year

About BIS:

BIS Safety Software has been headquartered in Sherwood Park, Alberta, since 2006. We build software that helps organizations manage safety training, learning, and compliance - and we’re growing!

A few things that make us different: we don’t use job titles internally - we value humility and contribution over hierarchy. We move fast, integrate new ideas quickly, and give people real ownership of their work. And through our Employee Stock Ownership Plan (ESOP), you have the opportunity to own a piece of the company you’re helping build.

How to apply:

Visit our Careers Page for more information. We sincerely thank all applicants for their interest. Only those selected for interviews will be contacted.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us

Job ID # L202606-22CRC

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.