Compliance & Security Specialist

Canadian Tire Corporation; Oakville; Híbrido; CAD 53.000 - 88.000; Jornada completa

Descripción de la vacante

Canadian Tire Services Limited/Canadian Tire Bank is seeking a Compliance & Security Specialist to support the Information & Cyber Security Governance team by conducting cybersecurity risk assessments, overseeing vulnerability remediation, validating controls, and delivering governance and compliance reporting.

The role also provides backup administration for AML and GRC platforms, including IBM OpenPages, and collaborates with Technology, Enterprise Risk Management, Internal Audit, PCI

Formación

• University degree or college diploma in technology, information security, cybersecurity, or related field.
• Professional certification completed or in progress (CISSP, CISM, CISA, CCSP, or CRISC) is an asset.
• Up to three years of experience in information technology, cybersecurity, information security, IT risk, audit, or compliance.
• Working knowledge of cybersecurity risk assessments, vulnerability and configuration management, penetration testing, application security, and IT control validation.
• Knowledge of security and control frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, and COBIT.

Responsabilidades

• Provide backup administration and operational support for the Bank’s AML and GRC platforms, including IBM OpenPages, to maintain service continuity and reduce dependency on a single platform specialist.
• Partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance, Vendor Management, and business teams to evaluate cybersecurity risk and support informed risk decisions.
• Oversee vulnerabilities and security gaps identified through vulnerability assessments, penetration testing, application security testing, cloud reviews, and configuration assessments; track remediation through closure.
• Help mature vulnerability management and risk assessment practices by improving workflows, prioritization, documentation, reporting, metrics,and automation.
• Help with incidents reporting and root cause analysis.
• Develop DLP policies and ensure their implementation.
• Validate the design and operating effectiveness of IT general controls, maintain risk and control repositories, and support policy exception management.
• Prepare clear risk metrics, dashboards, and governance reporting; anticipate emerging risks and help owners develop realistic remediation plans.
• Review risk assessments completed by colleagues and provide guidance that promotes consistent, high-quality analysis.
• Provide administration and backup support for assigned AML and GRC applications to maintain service continuity, resolve issues, and reduce key-person dependency.
• Escalate significant cybersecurity risks, control deficiencies, non-compliance, or unethical conduct in accordance with governance requirements.

Conocimientos

Cybersecurity risk assessments

Vulnerability management

IT controls validation

Communication skills

Documentation

Analytics

Educación

Technology degree

Information security certification

Herramientas

IBM OpenPages

Descripción del empleo

Role overview

The Compliance & Security Specialist supports the Information & Cyber Security Governance team by conducting cybersecurity risk assessments, overseeing vulnerability remediation, validating controls, and delivering governance and compliance reporting. The role also provides backup administration and operational support for the Bank’s Anti-Money Laundering (AML) and Governance, Risk and Compliance (GRC) platforms, helping strengthen resilience, continuity, and regulatory readiness.

What you’ll do

• Provide backup administration and operational support for the Bank’s Anti-Money Laundering (AML) and Governance Risk Compliance (GRC) platforms, including IBM OpenPages, to maintain service continuity and reduce dependency on a single platform specialist.


• Partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance, Vendor Management, and business teams to evaluate cybersecurity risk and support informed risk decisions.


• Oversee vulnerabilities and security gaps identified through vulnerability assessments, penetration testing, application security testing, cloud reviews, and configuration assessments; track remediation through closure.


• Help mature vulnerability management and risk assessment practices by improving workflows, prioritization, documentation, reporting, metrics,and automation.


• Help with incidents reporting and root cause analysis.


• Develop DLP policies and ensure their implementation.


• Validate the design and operating effectiveness of IT general controls, maintain risk and control repositories, and support policy exception management.


• Prepare clear risk metrics, dashboards, and governance reporting; anticipate emerging risks and help owners develop realistic remediation plans.


• Review risk assessments completed by colleagues and provide guidance that promotes consistent, high-quality analysis.


• Provide administration and backup support for assigned AML and GRC applications to maintain service continuity, resolve issues, and reduce key-person dependency.


• Escalate significant cybersecurity risks, control deficiencies, non-compliance, or unethical conduct in accordance with governance requirements.

What you bring

• University degree or college diploma in technology, information security, cybersecurity, or related field.


• Professional certification completed or in progress, such as CISSP, CISM, CISA, CCSP, or CRISC, is an asset.


• Up to three years of experience in information technology, cybersecurity, information security, IT risk, audit, or compliance.


• Working knowledge of cybersecurity risk assessments, vulnerability and configuration management, penetration testing, application security, and IT control validation.


• Knowledge of security and control frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, and COBIT.


• Familiarity with AML and GRC applications or platforms, along with an understanding of operational support and application administration.


• Understanding the SDLC, Agile methodologies cloud security considerations, privacy and data protection standards, PCI, PII.


• Familiarity with identity and access controls, including multi-factor authentication and single sign-on, plus foundational knowledge of cryptography and encryption.


• Strong communication, documentation, presentation, analytical, and prioritization skills, with the ability to translate technical risk into clear business terms.


• Collaborative and proactive approach, sound judgment, strong relationship‑building skills, and a continuous‑improvement mindset.

Working arrangement

This role follows Canadian Tire’s hybrid work model. Work location is determined by business and team needs. Effective December 1, 2026, employees are expected to work from the office four days per week.

Broadband Salary Range:

$53,000 – 88,000
Ourtypicalhiringrangeisbetween$70,000 and $75,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements.For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role. #LI-NZ2

This posting represents an existing vacancy within our organization.

We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.

About Us

At Canadian Tire Services Limited/Canadian Tire Bank, it is our mandate to continue to create innovative and rewarding financial solutions for our customers. Our growing suite of products and services showcase the dynamic contributions from our employees and our success is driven by a strong vision, loyal customers, and our ability to build teams that reflect the diverse customers and communities in which we live and work. Join us, where there’s a place for you here.

Our Commitment to Diversity, Inclusion and Belonging

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better. .

Accommodations

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity‑seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.