Cyber Security Compliance Analyst

Jobtailor; Edmonton; On-site; CAD 70,000 - 100,000; Full time

Job summary

Ledcor is seeking a cybersecurity governance, risk, and compliance professional to support the IT compliance program and third-party risk management. You will help document frameworks, assist in audits, and maintain baselines aligned with industry standards while coordinating cross-functional teams.

The role emphasizes independent work, strong communication, and the ability to manage multiple stakeholders while driving continuous improvement across governance, risk, and compliance activities.

Qualifications

• Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
• Experience supporting IT audits, internal controls, and compliance certifications such as ISO 27001, PCI, and ITGC
• Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
• Bachelor’s degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
• Strong knowledge of NIST, ISO 27001, CIS Controls, and related cybersecurity best practices
• Experience contributing to cybersecurity policies, standards, and governance documentation
• Strong project management, analytical, and problem-solving skills
• Ability to work independently and manage multiple stakeholders
• Excellent communication, collaboration, and interpersonal skills
• Ability to build positive working relationships and support cross-functional teams

Responsibilities

• Support execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs
• Assist in developing, documenting, and maintaining the IT Compliance Management Program and cybersecurity compliance framework
• Support implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards
• Perform control validation, evidence collection, and compliance assessments
• Develop and maintain compliance dashboards, metrics, and management reporting
• Coordinate internal and external ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
• Track audit findings, compliance gaps, remediation activities, and closure status
• Execute third-party risk management, including vendor onboarding, risk classification, security assessments, and remediation tracking
• Review vendor security questionnaires, SOC reports, and ISO certifications
• Maintain cybersecurity policies, standards, and compliance processes
• Work under the guidance of the Senior Specialist and support cross-functional stakeholders

Skills

Cybersecurity GRC experience

Program management

IT audits

Vendor risk management

NIST knowledge

ISO 27001 knowledge

CIS Controls knowledge

Policy development

Stakeholder management

Communication

Cross-functional collaboration

Education

Bachelor’s degree in Business/CS/IS

Job description

• Support execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs
• Assist in developing, documenting, and maintaining the IT Compliance Management Program and cybersecurity compliance framework
• Support implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards
• Perform control validation, evidence collection, and compliance assessments
• Develop and maintain compliance dashboards, metrics, and management reporting
• Coordinate internal and external ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
• Track audit findings, compliance gaps, remediation activities, and closure status
• Execute third-party risk management, including vendor onboarding, risk classification, security assessments, and remediation tracking
• Review vendor security questionnaires, SOC reports, and ISO certifications
• Maintain cybersecurity policies, standards, and compliance processes
• Work under the guidance of the Senior Specialist and support cross-functional stakeholders

Requirements

• Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
• Experience supporting IT audits, internal controls, and compliance certifications such as ISO 27001, PCI, and ITGC
• Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
• Bachelor’s degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
• Strong knowledge of NIST, ISO 27001, CIS Controls, and related cybersecurity best practices
• Experience contributing to cybersecurity policies, standards, and governance documentation
• Strong project management, analytical, and problem-solving skills
• Ability to work independently and manage multiple stakeholders
• Excellent communication, collaboration, and interpersonal skills
• Ability to build positive working relationships and support cross-functional teams

Core Competencies

Demonstrates expertise in Cybersecurity Governance, Risk, and Compliance (GRC) with a strong focus on IT Compliance Management and Third-Party Risk Management. Proficient in managing compliance frameworks, conducting audits, and developing cybersecurity policies aligned with industry standards.

Highest-signal resume keywords

• Cybersecurity Governance, Risk, And Compliance (GRC)
• ISO 27001 Compliance
• Third-Party Risk Management
• IT Audits And Internal Controls
• Project Management

ATS Optimization Keywords

Hard Skills

• Cybersecurity Compliance Framework
• Control Validation
• Compliance Assessments
• Compliance Dashboards
• Risk Classification
• Security Assessments
• Evidence Collection
• Remediation Tracking
• NIST Standards
• CIS Controls

Soft Skills

• Analytical Skills
• Problem-Solving Skills
• Communication Skills
• Collaboration Skills
• Interpersonal Skills

Certifications & Qualifications

• ISO 27001
• PCI Compliance
• ITGC

Industry Keywords

• Cyber Security Compliance
• Third-Party Risk Management
• IT Compliance Management
• Audit Findings
• Compliance Gaps