Principal Risk and Compliance Analyst, CoLab Software
+ Stock Options
More information about location
Collaboration tech for mechanical design
Be an early applicant
Collaboration tech for mechanical design
101-200 employees
Be an early applicant
+ Stock Options
More information about location
101-200 employees
Company mission
To empower engineering teams to build the future faster.
Role
Who you are
- If you have deep expertise in risk and compliance, especially in regulated industries like defense and want to own and scale an entire program, this role is for you
- You're a senior compliance professional with a background in security, risk, and regulatory frameworks
- You’ve led audits for complex certifications in the past. You can confidently navigate conversations with auditors, customers, and executives alike
- You know how to manage multiple workstreams without losing sight of the details
- You’re not looking to just “maintain compliance.” You want to build something
- You know what right looks like and aren’t afraid to roll up your sleeves to get there—whether that’s writing policy from scratch, configuring a GRC tool, or jumping on a customer call to walk through our controls
- 10+ years of experience in risk, compliance, or security programs within B2B software, with a strong preference for defense sector or regulated industry experience
- Demonstrated experience owning and completing audits such as SOC 2 Type II, ISO 27001, FedRAMP, and/or similar
- Strong knowledge of GRC platforms (e.g., Vanta, OneTrust) and experience configuring automation or workflows
- Exceptional written and verbal communication skills with the ability to speak credibly with auditors, sales teams, engineers, and executives
- Ability to read, interpret, and implement complex frameworks and policies from multiple jurisdictions (Canada, US, EU)
- Experience supporting high-stakes sales processes with timely and accurate security documentation
- Ability to work independently, manage competing priorities, and drive programs forward without micromanagement
- Canadian citizenship is required for this role
What the job involves
- This is a mission-critical role for someone who thrives on ownership, complexity, and getting things done. As our Principal Risk and Compliance Analyst, you’ll be CoLab’s senior-most compliance lead—responsible for managing multiple concurrent audit and certification streams while also laying the groundwork for new ones, particularly as we expand into defense and international markets
- You’ll report into our Director of Risk and Compliance and step in to lead all net-new compliance efforts: from scoping and implementing EU frameworks, to advancing our defense-readiness, to participating in customer calls and managing end-to-end audit cycles
- This is a hands-on, high-accountability role that directly supports sales, security, and executive stakeholders
- Lead end-to-end audit management across multiple certifications and frameworks including SOC 2 Type II, TISAX, FedRAMP, CPCSC, CCCS (Medium), and three ISO certifications—with EU and defense requirements on deck
- Act as CoLab’s internal compliance authority and primary liaison to external auditors, assessors, and customer security teams
- Participate in sales cycles by completing security questionnaires, documentation packages, and customer calls
- Manage risk assessments and reviews, maintain risk registers, and recommend mitigations to business and technical leaders
- Drive policy development and refinement across security and compliance programs
- Build automation into our compliance workflows (using tools like Vanta and others) to increase audit readiness and reduce manual effort
- Own and update GRC tooling, controls documentation, evidence gathering, and internal compliance training
Our take
The mechanical design process requires lots of back-and-forth between engineers, designers and business stakeholders who are giving and acting on feedback. Getting everybody on the same page is time-consuming, and comes with lots of admin and flitting between different platforms, whilst important information slips between the cracks.
This is why CoLab has built a cloud-based platform for collaborative mechanical design and reviewing. It integrates into the existing stack of design and engineering teams to bring together all the teams involved in early-stage design. Basically, the platform pools data, feedback, tracking issues, emails, spreadsheets and notebooks into one collaborative space.
Ultimately, CoLab is a simple way to collaborate on concepts and projects at the planning stage, thus nipping in the bud any problems that could arise down the line. With an impressive series of investments behind it, the company plans to scale up its market push, explore the possibilities of AI and expand its team.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Mar 2025
$4m
LATE VC
May 2024
$21m
SERIES B
Total funding: $45.6m
Company benefits
- Health and dental insurance (covered at 100% for the employee)
- Unlimited PTO
- Remote/Hybrid Work: Our main office location is in St. John's, NL where we offer hybrid and remote opportunities
Company HQ
East End, St. John's, NL
Leadership
Jeremy Andrews
(Co-Founder & CTO)Previosuly Mechanical Engineering Advisor at Paradigm Hyperloop, Team Lead at Memorial Baja, Battery Enclosure Engineering at Tesla, and Systems Test Engineer at General Dynamics Mission Systems.
Adam Keating
(Co-Founder & CEO)Currently Co-Founder and Strategic Advisor at DuXion. Previously Project Lead at Paradigm Hyperloop, Mechanical Engineer at RefleXion Medical and Production Engineer at Statoil.
Share this job
View 14 more jobs at CoLab Software