Cybersecurity GRC Specialist: Compliance & Third-Party Risk

Jobtailor; Edmonton; On-site; CAD 70,000 - 100,000; Full time

Job summary

Ledcor is seeking a cybersecurity governance, risk, and compliance professional to support the IT compliance program and third-party risk management. You will help document frameworks, assist in audits, and maintain baselines aligned with industry standards while coordinating cross-functional teams.

The role emphasizes independent work, strong communication, and the ability to manage multiple stakeholders while driving continuous improvement across governance, risk, and compliance activities.

Qualifications

• Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
• Experience supporting IT audits, internal controls, and compliance certifications such as ISO 27001, PCI, and ITGC
• Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
• Bachelor’s degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
• Strong knowledge of NIST, ISO 27001, CIS Controls, and related cybersecurity best practices
• Experience contributing to cybersecurity policies, standards, and governance documentation
• Strong project management, analytical, and problem-solving skills
• Ability to work independently and manage multiple stakeholders
• Excellent communication, collaboration, and interpersonal skills
• Ability to build positive working relationships and support cross-functional teams

Responsibilities

• Support execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs
• Assist in developing, documenting, and maintaining the IT Compliance Management Program and cybersecurity compliance framework
• Support implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards
• Perform control validation, evidence collection, and compliance assessments
• Develop and maintain compliance dashboards, metrics, and management reporting
• Coordinate internal and external ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
• Track audit findings, compliance gaps, remediation activities, and closure status
• Execute third-party risk management, including vendor onboarding, risk classification, security assessments, and remediation tracking
• Review vendor security questionnaires, SOC reports, and ISO certifications
• Maintain cybersecurity policies, standards, and compliance processes
• Work under the guidance of the Senior Specialist and support cross-functional stakeholders

Skills

Cybersecurity GRC experience

Program management

IT audits

Vendor risk management

NIST knowledge

ISO 27001 knowledge

CIS Controls knowledge

Policy development

Stakeholder management

Communication

Cross-functional collaboration

Education

Bachelor’s degree in Business/CS/IS

Job description

Ledcor is seeking a cybersecurity governance, risk, and compliance professional to support the IT compliance program and third-party risk management. You will help document frameworks, assist in audits, and maintain baselines aligned with industry standards while coordinating cross-functional teams.

The role emphasizes independent work, strong communication, and the ability to manage multiple stakeholders while driving continuous improvement across governance, risk, and compliance activities.