--- title: 'Risk and Compliance Specialist at BIS Safety Software' canonical: 'https://feeny.ai/job/risk-and-compliance-specialist-bis-safety-software-sherwood-park-62xgkkf0a6mk' type: 'job' last_seen: '2026-10-31' --- # Risk and Compliance Specialist at BIS Safety Software - **Company:** BIS Safety Software - **Location:** Sherwood Park, Canada - **Compensation:** $80k–$105k - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-10-23 - **Last confirmed live:** 2026-10-31 - **Apply:** https://jobs.lever.co/bis/ac9b67de-7b2f-49e2-9d9a-c7e03fb8f5f9 ## Job description BIS Safety Software is a SaaS company on a mission to change how organizations manage safety, learning, and compliance. Our clients trust us with their people's training records and personal information, and we take that trust seriously. We are looking for a Risk and Compliance Specialist to own our compliance program day to day: the audits, the controls behind them, and the risk calls that keep us on side all year. About the Role: This is a role for someone who already knows compliance and is ready to own it, not just support it. Audit season matters, but the real work happens in the months between. You’ll keep our program sharp so the audit itself is the easy part. You’ll also be the go-to voice on risk, data, and privacy across the company. One day that’s a tricky client request, the next it’s a vendor decision or a security question that needs an answer by end of day.You’ll help shape how BIS handles trust, and every team here will feel your work. This is an in-person role based out of our Sherwood Park, Alberta office. In this role, you'll be expected to: - Help lead our SOC 2 audit and PCI DSS attestation, scoping the work, assigning action items across departments, following up on deadlines, and collecting the evidence that gets us through cleanly - Own control documentation for each framework and work with every team to confirm their controls are current and holding up - Lead and contribute to risk assessments across the business, documenting risks, recommending mitigation, and following through until each one is resolved or escalated - Review in-scope vendors that handle personal information, financial data, or client data - Manage the Risk and Compliance and Privacy inboxes, answering client tickets on privacy, data, and personal information with clear, accurate guidance - Keep our privacy policy, terms and conditions, and subprocessor list current, and flag when changes in law or the industry mean something needs a second look - Complete the privacy, data security, and data retention sections of RFPs and security questionnaires - Partner with IT and Technology on risk, offering practical solutions, separating true must-haves from best-practice suggestions, and teaching along the way - Coordinate quick cross-team reviews when an urgent issue or emerging risk lands You might be the right fit if you: - Catch what's missed. Attention to detail is the single most important trait for this role, and you look past the original ask to see the whole picture - Have kept a SOC 2 program running, not just sat in on the audit, and can walk through what good pre-audit prep looks like - Juggle many large projects at once with an audit lens: dozens of action items, several departments, and different deadlines, all tracked and closed out on time - Speak up. You're comfortable raising considerations when it matters, and you know how to make your case - Ask the right questions first. You figure out what's actually needed, and how much it matters to the client, before committing hours to it - Shift gears when something urgent lands without losing track of everything else - Adapt your approach to the situation instead of applying one way of doing compliance to every problem - Own the work without waiting for permission or step-by-step direction - Build real working relationships across teams, because this role touches almost every department here Qualifications we are looking for: - 2+ years of hands-on compliance experience - SOC 2 experience, including maintaining ongoing control documentation and coordinating audit deliverables across departments - PCI DSS and/or GDPR experience - Strong data fluency: subprocessors, data controllers vs. processors, data governance and retention, and how information flows across systems - Post-secondary education in a relevant field, or equivalent experience - Tech-savvy and comfortable working with AI tools, as you'll be in our software every day and use AI to support compliance work - Experience with Microsoft 365 Bonus points if you have: - An IT, SaaS, or software-side compliance background, especially around data management and data controls - Privacy knowledge, including Canadian privacy law - Certifications such as CIPP/C or CIPM - Cybersecurity knowledge - Experience completing RFPs or security questionnaires Compensation and benefits: - Employee Stock Ownership Plan (ESOP) - Full medical, dental, and vision coverage - Life insurance and disability insurance - Health spending account - Flexible working hours - On-the-job training and growth opportunities - Free on-site parking About BIS: BIS Safety Software has been headquartered in Sherwood Park, Alberta, since 2006. We build software that helps organizations manage safety training, learning, and compliance - and we're growing! A few things that make us different: we don't use job titles internally - we value humility and contribution over hierarchy. We move fast, integrate new ideas quickly, and give people real ownership of their work. And through our Employee Stock Ownership Plan (ESOP), you have the opportunity to own a piece of the company you're helping build. How to apply: With your application, please include a short cover letter about a SOC 2 audit you helped coordinate: what your part was, and one thing you'd do differently next time. Visit our Careers Page for more information. We sincerely thank all applicants for their interest. Only those selected for interviews will be contacted. Job ID #T202610-23CRC ## About BIS Safety Software ## Company Overview - **One-liner**: BIS Safety Software provides an AI-enabled, cloud-based Environment, Health, and Safety (EHS) software suite that accelerates workforce readiness, certification control, digital field execution, asset oversight, and compliance reporting for regulated industries. - **Entity Type**: Private (Bootstrapped/Profitable) - **Headquarters**: Sherwood Park, Alberta, Canada - **Founded**: 2006 - **Founders**: Not publicly available ## Core Business - **Primary industry**: Environment, Health, and Safety (EHS) Software / E-Learning - **Target customers**: B2B; safety training organizations, construction, oil & gas, manufacturing, and other regulated industries across North America - **Mission or purpose statement**: “Saving lives is our daily mission by making workplaces safer, ensuring people return home to their loved ones.” ## Products & Services - **SafetyNET Platform**: The core integrated suite combining training, compliance, forms, and asset management. - **Learning Management System (LMS)**: Enterprise-level online learning system with an integrated training matrix and exam engine, including access to thousands of premium EHS courses. - **Training Record Management**: Advanced record management with built-in notifications and alerts for certification control. - **Online Digital Forms**: AI-powered digital forms for incident management, COR audits, inspections, hazard assessments, and more. Features a drag-and-drop builder, mobile/offline capability, and multi-respondent workflows. - **Asset Management**: Software for tracking equipment, vehicles, technology, and other physical assets. - **Classroom Management Software**: Comprehensive tool for managing instructors, classrooms, courses, and events. - **Digital Folders**: Online folders for employee access to policies and procedures with automated sign-off technology. - **Lone Worker Feature**: Enables solitary employees to relay real-time status updates to managers for enhanced safety. ## Market Standing - **Valuation/Market Cap**: Not publicly available (private company) - **Key Metric**: Annual Revenue estimated at **$18M**; Over **2.5 million active users**; Over **3 million successful safety forms completed each year**. - **Notable Investors/Partners**: Not publicly available (bootstrapped). Over 50% of new customers are referred by existing clients. The SafetyNET network includes more than 500 leading safety training companies across North America. - **Growth Signals**: Headcount of **55 employees** (+9.1% YoY, +6 people). In 2022, purchased a new head office in Sherwood Park and a building in Houston, Texas to facilitate growth. Released the Lone Worker feature in 2023. Workforce distributed across Canada, India, Pakistan, and the United States. ## Competitive Advantages - **Integrated Platform**: Combines LMS, training records, digital forms, asset management, and lone worker safety into a single, unified system, reducing the need for multiple vendors. - **AI-Enabled Efficiency**: AI-powered conversion of safety documents into digital, fillable forms, streamlining field execution. - **High Customer Loyalty**: Over 50% of new customers come from referrals, indicating strong product-market fit and customer satisfaction. - **Specialized Focus**: Deep expertise in the EHS and safety training niche for over 18 years, providing a tailored solution that generic software cannot match. ## Strategic Focus - **Geographic Expansion**: Recent investment in a Houston office signals a push to grow presence in the US market. - **Product Innovation**: Continued enhancement of digital forms (multi-respondent workflows, version history) and introduction of new safety features like the Lone Worker module. - **Talent Growth**: Expanding the team (9.1% headcount growth) with a focus on collaborative, tech-savvy talent to support product development and customer success. ## Why Work Here - **Culture & Values**: Described as a “diverse group, united by shared values” that embraces change, shuns bureaucracy, and is driven by curiosity. The team is tech-savvy and focused on making a meaningful impact. - **Mission-Driven Work**: Employees are motivated by the “noble cause of safety,” directly contributing to saving lives and ensuring people return home safely. - **Work Environment**: Primarily **in-person** at the Sherwood Park head office, with some remote exceptions for employees in different regions. The company believes in the power of in-person collaboration. - **Employer Rating**: 4.8/5.0 (22 reviews on LinkedIn). Breakdown: Work-Life: 4.7, Compensation: 4.2, Culture: 4.8, Career: 4.6. - **Hiring Process**: Transparent and thoughtful; typically 3 interviews with different team members and a skill assessment. The company emphasizes finding the right cultural and skill fit over speed. ## Sources 1. [bissafety.com](https://bissafety.com/) 2. [bissafety.com - About Us](https://bissafety.com/about-bis-safety-software/) 3. [LinkedIn - BIS Safety Software](https://www.linkedin.com/company/bis-safety-software) 4. [Lever.co - BIS Careers](https://jobs.lever.co/bis) 5. [bis.graycelltech.net - Careers Page](https://bis.graycelltech.net/careers/) ## Other roles at BIS Safety Software - [Web Designer](https://feeny.ai/job/web-designer-bis-safety-software-sherwood-park-hhd17yy0jefv) — Sherwood Park, Canada - [QA Analyst](https://feeny.ai/job/qa-analyst-bis-safety-software-sherwood-park-5ea9j81edwsk) — Sherwood Park, Canada - [Course Development Quality Control Specialist](https://feeny.ai/job/course-development-quality-control-specialist-bis-safety-software-sherwood-park-1xg8qt1hfrk0) — Sherwood Park, Canada - [UI/UX Designer](https://feeny.ai/job/ui-ux-designer-bis-safety-software-sherwood-park-0mgzxrbsd2pm) — Sherwood Park, Canada