Associate Security Analyst

We’re looking for an Associate Security Analyst to help strengthen our information security and compliance posture. You’ll play a hands-on role in auditing, analyzing, and advising across the organization, while growing your expertise through mentorship, training, and real-world experience.

This is an excellent opportunity for someone early in their InfoSec career who’s eager to learn, contribute to meaningful work, and collaborate cross-functionally in a dynamic SaaS environment.

YOU’RE FIRED UP TO

• Collaborate with teams across Site Reliability, Engineering, Development, HR, and more to align policies and practices with certifications and regulatory standards.
• Support external audits, compliance reviews, customer due diligence requests, and assessments (e.g., SOC 2, ISO 27001).
• Assist in monitoring enterprise-level InfoSec and compliance practices and responding to security alerts.
• Help identify and manage security risks, contributing to proactive solutions that improve our overall security posture.
• Contribute to the development and delivery of security awareness training and compliance-related education for employees.
• Draft, review, and update internal security and compliance policies, procedures, and standards.
• Stay informed about evolving industry regulations and best practices to ensure our compliance efforts stay current.
• Assist in responding to third-party and customer due diligence inquiries.
• Support GRC tool management and help build a scalable risk and compliance framework.

WHAT YOU BRING TO THE TEAM

• 1–3 years of experience (including internships, coursework, personal projects, or open-source contributions) in information security, compliance, or related areas.
• Foundational knowledge of:
  • Logging/Monitoring and SIEM tools (e.g., Splunk)
  • AV/MDM management
  • Information security risk management
  • Business continuity and disaster recovery (BCP/DRP)
  • Compliance management frameworks
• Interest in audit management, third-party risk, and GRC tools.
• Clear written and verbal communication skills, with the ability to explain technical findings in simple terms.
• Familiarity with common compliance standards (e.g., SOC 2, ISO 27001, GDPR, CCPA, PCI DSS, CSA STAR).
• A learning mindset and eagerness to explore new tools, especially AI-based solutions.
• You've experimented with AI tools for work or fun, and you’re excited about deepening that knowledge to drive efficiency and innovation.

Our Investment in You: 

• “Cabana Days” - our version of a flexible work week!
  To enable our employees to do their best work, offering flexibility to prioritize what is important and to take time needed for rest and rejuvenation when possible based on business and operational needs.
• Ability to do your job in a supported, but still flexible environment
• Supported professional development, learning & career opportunities - be supported in your growth journey! 
• Regular 1:1 coaching with your leader and regular connection to a passionate executive team
• Work in a team big enough for growth but lean enough to make a real impact
  

A full range of benefits to keep you happy & healthy; 

• Competitive Salaries - we pay fairly based on experience and expertise, not your ability to negotiate! 
• Health & Dental Benefits, Virtual Care, & Disability top up - all starting from day 1! 
• Virtual mental health and EAP platform 
• WealthSimple GRSP & Matching 
• Annual Wellness Benefit ($1000 per year) 
• Opportunity to work remote - anywhere in Canada! 
• Employee Options - everyone shares in our success! 
• Internet Subsidy on each paycheck 
• Tiki Bucks Incentive Program - everyone is entitled to earn bonuses!
• A People First Company - 4.4 rating on Glassdoor
  
• Recently named "Most Admired Corporate Cultures" and ranked #6 in "Best Workplaces in Canada" in company size category

Who we are, and what we do: 

Mission
Match customers with the right expert, at the right time, so no opportunity is lost. 

Values
Collaboration. Honesty. Empathy. Elevate. Resilience. Service Excellence.

Coconut Software makes it effortless for customers to connect with their bank or credit union. Our appointment scheduling, queue management, and video banking solutions are used by leading financial institutions across North America, including RBC, Arvest Bank, Vancity, and Rogue Credit Union. Organizations that use Coconut benefit from a seamless customer experience that improves NPS, reduces wait times, and increases conversion rates.

To date we have raised close to 40M and have been doubling revenue year after year. The team at Coconut has ambitious growth plans to continue to scale the business to new heights by owning the North American market and delivering innovative solutions to our customers. 

Coconut has a company culture that is best in class. We foster a community that is unconditionally inclusive, and in return ask that our people contribute their differing perspectives, ideas and experiences for one common purpose: to advance the way people live and work in an environment of diversity, equity and inclusion and workplace belonging. 

Some recent awards we're proud of include:

Coconut Software is committed to treating all people in a way that allows them to maintain their dignity and independence. We believe in integration and equal opportunity. We are committed to meeting the needs of people with disabilities in a timely manner, and will do so by preventing and removing barriers to accessibility and meeting accessibility requirements under the Accessibility for Ontarians with Disabilities Act, 2005.