Sr. Compliance Officer

Our client is a top financial institution with significant North American holdings. They have operations across most major verticals, including institutional & corporate, wealth management, private clients, commercial banking, treasury, and retail banking.

Introduction

Robertson is seeking a skilled Sr. Compliance Officer to join our client in support of an existing vacancy.

Contract Period: 12 months

Pay Rate: Starting form $56 per hour

Location: Ottawa, ON

Location Type: Hybrid

Business Hours: Monday-Friday, 9:00 AM – 5:00 PM

Job Responsibilities

• Serve as the point of contact for managing all compliance and audit activities related to assigned Cloud Services, acting as a trusted partner to the assigned Cloud Services
• Lead interactions with both internal and external auditors (including external regulatory bodies, internal Thales auditors, and third-party auditors), ensuring efficient and effective audit processes
• Support the development, implementation, and maintenance of compliance programs to meet the organization's strategic objectives and regional regulatory requirements
• Lead the preparation and execution of internal and external audits across assigned Cloud Service, ensuring compliance with established corporate policies/standards, industry standards, and regulatory requirements
• Develop and implement audit strategies for the assigned Cloud Services, ensure audits are proactive, risk-based, and aligned with business priorities, while ensuring a continuous improvement approach
• Lead and enhance the risk management and improve controls for assigned Cloud Services, ensuring compliance with both internal policies and external regulatory requirements
• Support and improve the Cloud Services Change Management, Business Continuity Plan (BCP), and Disaster Recovery (DR) related controls to ensure compliance with corporation policies/standards and business continuity regulations and best practices
• Maintain and update key governance, risk management and compliance documentation, including ISMS 27001, ISO 27017/18 mandatory documents, ensuring alignment with corporate policy and evolving industry standards
• Support the develop, review, and implement cybersecurity compliance policies, standards and procedures to ensure continuous improvement of internal controls, audit readiness, and risk mitigation
• Recommend and drive the implementation of cybersecurity policies and standards aimed at improving Cloud Services’ compliance posture, ensuring policies are aligned with business objectives and regulatory expectations
• Regularly assess and refine compliance workflows to optimize efficiency and alignment with evolving compliance frameworks
• Partner with cross-functional teams in analysing cybersecurity compliance requirements cross functions, ensuring adherence to local and international regulations (e.g., GDPR, CCPA, etc.)
• Support the development of global compliance strategies, ensuring supported Cloud Services units are aware of evolving global cybersecurity and privacy laws and that cross-border data transfers are compliant with corporate policies and standards
• Provide cybersecurity compliance guidance and support to sales, presales, product management, and other business units on cybersecurity compliance-related matters, including RFPs, RFIs, security & compliance questionnaires, and client security inquiries
• Be the primary advisor to assigned Cloud Services on complex compliance and security topics, providing recommendations for risk mitigation, process improvements, and regulatory adherence
• Engage directly with key customers to address complex compliance and security questions, and to support ongoing trust-building initiatives
• Ensure the communication of compliance requirements and audit results to relevant stakeholders, including customers, partners, and regulators
• Oversee the ongoing monitoring of compliance programs to ensure that they remain effective and aligned with the organization’s security goals and business objectives
• Develop and provide regular compliance reports to senior management, highlighting audit results, risk areas, and the status of corrective actions

Experience & Qualification Requirements

• 7-10 years of experience in cybersecurity compliance, risk management, or information security experience required
• Experience in cloud computing or SaaS environments is highly preferred
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar certifications are strongly preferred
• Strong knowledge and practical experience with ISO 27001, SOC 2, PCI DSS, and other relevant framework