Cybersecurity Compliance Specialist

As our Cybersecurity Compliance Specialist, you will be the front-line champion and strategist safeguarding Docebo's security posture and driving customer trust. You will bridge the gap between technical rigor and client confidence, translating complex compliance frameworks (like NIS2, NIST, GDPR, ISO, SOC, and FedRAMP) into competitive advantages. In this role, your work directly accelerates deal cycles, empowers our sales and legal teams, and ensures our global SaaS ecosystem remains fortress-secure.

Responsibilities

Respond to prospect and customer security requests, review RFIs/RFQs, and deliver responses regarding Docebo's compliance and security posture; Tackle customer security questionnaires and collaborate internally to establish Corrective Action Plans (CAPs) for outstanding requirements; Partner with the Docebo legal team to review Customer Agreements, Terms & Conditions, and Data Processing Addendums, mapping client requirements to standard processes; Lead and support annual customer audits while partnering with the GRC team during SOC2, ISO (27001, 9001, 42001), and NIS2 assessments; Leverage AI tools and basic programming capabilities to automate internal processes and optimize compliance workflows; Organize internal compliance documentation and publish up-to-date materials to Docebo's trust pages using platforms like Vanta; Support third-party vendor risk assessments, monitor security controls, and maintain management reporting dashboards to mitigate external supplier risks

Requirements

4+ years of hands-on experience supporting security activities, audits, and compliance in SaaS environments; Bachelor's degree in Computer Science or a related field; Solid working knowledge of cloud environments (AWS, Azure, GCloud); Knowledge of data privacy regulations such as GDPR, CCPA, and PIPEDA; Deep familiarity with security and compliance standards including ISO/IEC (27001, 27017, 27018, 27701, 9001, 42001), SOC 2, PCI, NIS2, and CFR21 Part 11; Basic coding skills and hands-on experience with security governance platforms like Vanta and 1UP; Exceptional written and verbal English communication skills; Proactive, adaptable, and passionate about the intersection of technology, business, and enterprise learning

Nice to have

Holding certifications such as CISA, CIPP (or CIPT), or CompTIA Security+; Basic understanding and exposure to the FedRAMP framework; Specialized degree focus in Information Security or Auditing

Benefits

Employee Share Purchase Plan (ESPP) at a 15% discount; Competitive compensation package; Health benefits; Paid vacation days; Two company-wide Docebo Days; Floating holidays for cultural celebrations; Birthday off; Family coverage offering time with little one(s); Meal voucher for every working day; Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors); Company-wide events