Audit & Compliance Analyst - SOC 2 / PCI DSS

Candescent (Digital First Holdings LLC); Southwestern Ontario; Hybrid; CAD 80,000 - 100,000; Full time

Job summary

Candescent is seeking an experienced Audit & Compliance Analyst to support its audit and compliance programs, focusing on SOC 2 Type II and PCI DSS readiness. You will work with control owners, auditors, information security teams, and business stakeholders to ensure audit readiness and strong compliance outcomes.

The role emphasizes coordinating audits, collecting evidence, tracking remediation, and supporting regulatory examinations while collaborating across Legal, IT, and Operations to

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Business, Accounting, Finance, or related field.
• 3–7 years of experience in audit, compliance, information security, risk management, or governance functions.
• Experience supporting or managing SOC 2 Type II audits.
• Experience supporting or managing PCI DSS compliance assessments.
• Knowledge of banking and financial services regulatory requirements.
• Strong organizational and communication skills.

Responsibilities

• Support the execution of assigned compliance programs and audit engagements.
• Coordinate annual SOC 2 Type II audits and PCI DSS, and other assessments as needed.
• Collect, organize, and maintain audit evidence and supporting documentation.
• Track audit findings, risk items, corrective actions, and remediation activities through closure.
• Assist with customer security assessments, due diligence requests, and compliance questionnaires.
• Support regulatory examinations and internal compliance reviews.
• Monitor compliance activities against applicable requirements, including PCI DSS, FFIEC guidance, GLBA, and related industry standards.
• Develop audit status reports, compliance metrics, and management reporting.
• Participate in control readiness reviews and continuous compliance improvement initiatives.
• Maintain compliance repositories, documentation libraries, and audit workpapers.
• Collaborate with Information Security, Technology, Product, Legal, and Operations teams to support audit and compliance requirements.

Skills

SOC 2 Type II audits

PCI DSS compliance

Audit coordination

Regulatory knowledge

Communication skills

Education

Bachelor's degree in Information Systems, Cybersecurity, Business, Accounting, Finance, or related field

Job description

Candescent is seeking an experienced Audit & Compliance Analyst to support its audit and compliance programs, focusing on SOC 2 Type II and PCI DSS readiness. You will work with control owners, auditors, information security teams, and business stakeholders to ensure audit readiness and strong compliance outcomes.

The role emphasizes coordinating audits, collecting evidence, tracking remediation, and supporting regulatory examinations while collaborating across Legal, IT, and Operations to