Enter a job title or keyword
Sr. Compliance Officer
Job Location:
Hourly Salary:
Posted:
24 October 2026 (16 hours ago)
Posted:
Application Deadline:
21 January 2027
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Job Title: Senior Cloud Services Compliance Officer
Location: Ottawa ON K2V 1C2 Hybrid - 3 days per week in the office
Duration: 12 months
Payrate: $45/hr. - $52/hr. on (W2)
Shift: 9:00 a.m. 5:00 p.m. EST
Position Summary
Key Responsibilities:
1. Cybersecurity Compliance Programs:
2. Audit Strategy and Execution:
3. Advanced Compliance and Risk Management:
4. Policy Development and Process Improvement:
5. Global Compliance Management:
6. Support and Advisory for Cloud Services Units:
7. Customer and Stakeholder Engagement:
8. Continuous Monitoring and Reporting:
Minimum Requirements:
Top Required Skills
Preferred Qualifications
Location: Ottawa ON K2V 1C2 Hybrid - 3 days per week in the office
Duration: 12 months
Payrate: $45/hr. - $52/hr. on (W2)
Shift: 9:00 a.m. 5:00 p.m. EST
Position Summary
- The Senior Cloud Services Compliance Officer is responsible for leading and overseeing compliance initiatives for Cloud Services for a cloud services domain level with a focus on managing complex audit processes customer security and compliance assessments regulatory compliance and internal security and privacy programs.
- This individual will collaborate with senior management of a business units and external stakeholders to ensure compliance with internal policies industry standards and regulatory requirements across multiple jurisdictions.
- The Sr. Compliance Manager will also play a critical role in supporting strategic direction for compliance practices driving continuous improvement and ensuring robust risk mitigation in Cloud Services operations.
Key Responsibilities:
1. Cybersecurity Compliance Programs:
- Serve as the point of contact for managing all compliance and audit activities related to assigned Cloud Services acting as a trusted partner to the assigned Cloud Services.
- Lead interactions with both internal and external auditors (including external regulatory bodies internal Client auditors and third-party auditors) ensuring efficient and effective audit processes.
- Support the development implementation and maintenance of compliance programs to meet the organizations strategic objectives and regional regulatory requirements.
2. Audit Strategy and Execution:
- Lead the preparation and execution of internal and external audits across assigned Cloud Service ensuring compliance with established corporate policies/standards industry standards and regulatory requirements.
- Develop and implement audit strategies for the assigned Cloud Services ensure audits are proactive risk-based and aligned with business priorities while ensuring a continuous improvement approach.
3. Advanced Compliance and Risk Management:
- Lead and enhance the risk management and improve controls for assigned Cloud Services ensuring compliance with both internal policies and external regulatory requirements.
- Support and improve the Cloud Services Change Management Business Continuity Plan (BCP) and Disaster Recovery (DR) related controls to ensure compliance with corporation policies/standards and business continuity regulations and best practices.
- Maintain and update key governance risk management and compliance documentation including ISMS 27001 IS27017/18 mandatory documents ensuring alignment with corporate policy and evolving industry standards.
4. Policy Development and Process Improvement:
- Support the develop review and implement cybersecurity compliance policies standards and procedures to ensure continuous improvement of internal controls audit readiness and risk mitigation.
- Recommend and drive the implementation of cybersecurity policies and standards aimed at improving Cloud Services compliance posture ensuring policies are aligned with business objectives and regulatory expectations.
- Regularly assess and refine compliance workflows to optimize efficiency and alignment with evolving compliance frameworks.
5. Global Compliance Management:
- Partner with cross-functional teams in analyzing cybersecurity compliance requirements cross functions ensuring adherence to local and international regulations (e.g. GDPR CCPA etc.).
- Support the development of global compliance strategies ensuring supported Cloud Services units are aware of evolving global cybersecurity and privacy laws and that cross-border data transfers are compliant with corporate policies and standards.
6. Support and Advisory for Cloud Services Units:
- Provide cybersecurity compliance guidance and support to sales presales product management and other business units on cybersecurity compliance-related matters including RFPs RFIs security & compliance questionnaires and client security inquiries.
- Be the primary advisor to assigned Cloud Services on complex compliance and security topics providing recommendations for risk mitigation process improvements and regulatory adherence.
7. Customer and Stakeholder Engagement:
- Engage directly with key customers to address complex compliance and security questions and to support ongoing trust-building initiatives.
- Ensure the communication of compliance requirements and audit results to relevant stakeholders including customers partners and regulators.
8. Continuous Monitoring and Reporting:
- Oversee the ongoing monitoring of compliance programs to ensure that they remain effective and aligned with the organizations security goals and business objectives.
- Develop and provide regular compliance reports to senior management highlighting audit results risk areas and the status of corrective actions.
Minimum Requirements:
- 7 years of experience in cybersecurity compliance and certifications preferably within cloud services environments.
- Proven experience independently leading and conducting internal and external audits including risk assessments and remediation activities.
- Strong knowledge and experience working with industry-leading information security standards such as: IS27001 IS27017/27018 SOC2 FedRAMP CSA PCI-DSS and Data Privacy Regulations (e.g. GDPR)
- Solid understanding of cloud environments (e.g. AWS Azure GCP) and cloud security fundamentals.
- Demonstrated ability to effectively communicate and collaborate with a broad range of internal and external stakeholders including business units senior leadership auditors and regulators.
Top Required Skills
- 7 years of experience in cybersecurity compliance certifications and audit management within cloud-services environments.
- Strong attention to detail excellent organizational and multitasking skills and the ability to work independently while leading and conducting internal and external audits. (looking for 5 years of experience leading audit)
- Senior-level capability to quickly learn new processes take ownership of the audit lifecycle and manage audits independently from planning through completion.
- Demonstrated ability to communicate effectively and collaborate with a broad range of internal and external stakeholders.
- Strong knowledge of and hands-on experience with leading information security standards and regulatory frameworks including IS27001 IS27017/27018 SOC 2 FedRAMP CSA PCI DSS and data privacy regulations such as GDPR
- They will be part of an international team of 10. For this assignment their primary responsibility will be supporting Canadian audits while also collaborating with global stakeholders.
Preferred Qualifications
- Experience: 7-10 years of experience in cybersecurity compliance risk management or information security. Experience in cloud computing or SaaS environments is highly preferred.
- Certifications: Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) or similar certifications are strongly preferred.
- Expertise in Standards & Frameworks: Strong knowledge and practical experience with IS27001 SOC 2 PCI DSS and other relevant frameworks (e.g. GDPR NIST).
- Leadership Skills: Proven experience in leading complex audits with the ability to work closely with senior leadership legal data privacy operations and technical teams.
- Communication Skills: Excellent written and verbal communication skills with the ability to present complex compliance and audit findings to both technical and non-technical stakeholders.
- Strategic Thinking: Ability to take a strategic approach to compliance management with a focus on risk mitigation continuous improvement and aligning compliance initiatives with business goals.
Required Experience:
Senior IC
About Company
LanceSoft is a global workforce solutions company connecting businesses with top talent across industries and geographies.
