Security Compliance Analyst

Position Type:

If youre looking for a fulfilling career that can make a real difference in your life and the lives of others youve come to the right place.

As a national health solutions partner we put people first in everything we do and that begins with our team of 8000 professionals who bring a cross-section of diverse life experiences and career expertise to Medavie. By collaborating and innovating together our employees are creating industry-leading solutions in insurance primary care and emergency medical services that impact millions of lives in Canada each year.

Our mission is to improve the wellbeing of Canadians so that every life can be lived to the fullest and its reflected in our award-winning culture. We celebrate individuality and value the diverse perspectives and skills our employees contribute. We go beyond providing competitive pay and comprehensive benefits to offer opportunities for personal and professional growth flexible work options meaningful experiences and supportive leadership. Medavie is where employees can be their best selves feel they belong and achieve their full potential. Be part of it by applying for a position with us today.

Step into a pivotal role where your expertise in cybersecurity and compliance will directly shape the security framework of a forward-thinking organization. As our Security Compliance Analyst youll be a key player in safeguarding our systems ensuring regulatory alignment and fostering a culture of accountability and resilience.

This is more than a checklist roleyoull be driving initiatives influencing policy and collaborating across departments to build a secure and compliant future.

What Youll Be Doing

• Risk & Compliance Assessments: Conduct IT and security risk assessments identify vulnerabilities and implement effective mitigation strategies.

• Audit & Control Excellence: Lead internal audits support external assessments (SOC 2 ISO 27001 NIST CSF) and ensure control effectiveness.

• Vulnerability Oversight: Monitor and report on system vulnerabilities working closely with IT teams to ensure timely remediation.

• Policy & Awareness Development: Help shape and maintain security policies and support training initiatives to promote compliance awareness.

• Vendor Risk Management: Evaluate third-party vendors for security risks and support our third-party risk management (TPRM) program.

• Audit Coordination: Act as the primary liaison for SOC 2 audits and ITGC reviews ensuring smooth and timely execution.

• Reporting & Special Projects: Prepare security reports and contribute to strategic security initiatives.

What You Bring to the Table

• Degree or diploma in IT Cybersecurity or a related field.

• 5 years of experience in security compliance IT audit or risk management.

• At least one recognized certification is required: CISA CRISC CISM CISSP ISO 27001 Implementer or equivalent.

• Deep understanding of ITGCs risk assessments and compliance frameworks.

• Experience with GRC tools (e.g. Resolver) and third-party risk evaluations.

• Strong communication skills and the ability to engage with technical and executive stakeholders.

• Bilingualism is a plus!

#CBM1

#LI-VS1

We believe our employees should reflect the communities we serve and welcome applications from candidates of all backgrounds. To provide the best experience possible we will support you with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team of your needs. We are committed to making sure recruitment retention advancement and compensation are fair and accessible while following all relevant human rights and privacy laws. We appreciate everyone who has shown interest in this position. Only those selected for an interview will be contacted.

If you experience any technical issues throughout the application process please email: .