Cyber Security Compliance Analyst

Essential Responsibilities:

• Assist in the development documentation and maintenance of the IT Compliance Management Program and cybersecurity compliance framework
• Support the implementation and maintenance of cybersecurity compliance baselines aligned with legal regulatory contractual and industry standards (e.g. ISO 27001 SOC 2 NIST)
• Perform control validation evidence collection and compliance assessments to support internal reviews certifications and regulatory attestations
• Develop and maintain compliance dashboards metrics and reporting for management risk owners and executive stakeholders
• Coordinate internal and external audit activities including ITGC ISO 27001 SOC 2 Type II and Cyber Essentials audits
• Track audit findings compliance gaps remediation activities and closure status ensuring timely follow-up with stakeholders
• Execute the third-party risk management program including vendor onboarding risk classification security assessments and remediation tracking
• Review vendor security documentation including security questionnaires SOC reports and ISO certifications to assess compliance risks
• Maintain cybersecurity policies standards and compliance processes to ensure alignment with evolving regulatory requirements organizational policies and industry best practices

Qualifications:

• Minimum 2 years of experience in cybersecurity governance risk and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs frameworks and cybersecurity compliance initiatives
• Experience supporting IT audits internal controls and compliance certifications (e.g. ISO 27001 PCI ITGC)
• Experience facilitating third-party/vendor risk management including security assessments and remediation tracking
• Bachelors degree in Business Computer Science Information Systems or a related field with IT audit or compliance experience
• Strong knowledge of cybersecurity frameworks and standards including NIST ISO 27001 CIS Controls and related best practices
• Experience contributing to the development and maintenance of cybersecurity policies standards and governance documentation
• Strong project management analytical and problem-solving skills with the ability to work independently and manage multiple stakeholders
• Excellent communication collaboration and interpersonal skills with a proven ability to build positive working relationships and support cross-functional teams

Working Conditions:

• Remote position with the flexibility of attending the office as business needs require

Compensation

This is the expected base pay range for this role. Individual base pay will be determined based on a variety of factors including experience knowledge skills education and location.

Our competitive total rewards package provides compensation and benefits that support your physical mental and financial wellbeing. We offer exciting challenging work with opportunities to develop your skills and knowledge.

Additional Information

Our workplace culture has been recognized as one of Canadas Best Diversity Employers Canadas Most Admired Corporate Cultures and a Top 100 Inspiring Workplace in North America.

Employment Equity

At Ledcor we believe diversity equity and inclusion should be part of everything we do. We are proud to be an equal-opportunity employer. All qualified individuals regardless of race color religion sex national origin sexual orientation age citizenship marital status disability gender identity Veteran status or any other identifying characteristic are encouraged to apply.

Our True Blue team consists of individuals from all backgrounds who contribute diverse perspectives and experiences to Ledcor. We are committed to continuing to build on our culture of empowerment inclusion and belonging.

Adjustments will be provided in all parts of our hiring process. Applicants need to make their needs known in advance by submitting a request via email. For more information about Ledcors Inclusion and Diversity initiatives please visit our I&D page.