Governance, Risk & Compliance Analyst

EllisDon; London; On-site; CAD 80,000 - 120,000; Full time

Job summary

EllisDon is looking for an Information Security Analyst to support the development and management of IT security policies and ensure compliance with industry standards. This role involves collaboration across the organization, conducting risk assessments, and providing guidance on compliance requirements. Ideal candidates will have a strong background in information security and the ability to support government-sensitive projects.

Benefits

Continuous learning and growth opportunities

Competitive compensation package

Commitment to inclusion and diversity

Qualifications

• At least 5 years of relevant work experience.
• Deep knowledge of industry frameworks & certifications, including NIST.
• Ability to obtain Level II (Secret Clearance) with the Government of Canada.

Responsibilities

• Develop, update, maintain, and review IT security policies and procedures.
• Conduct risk assessments of existing and new technology assets.
• Collaborate with IT teams to facilitate secure design of new systems.

Skills

Information Security

Governance

Risk Management

Compliance

Attention to Detail

Education

Post-secondary education in IT or Cyber Security

Job description

Do you want to build the software that builds cities? EllisDon’s is made up of Full-Stack Developers, Data Analysts, UX Designers, Product Owners, IT Operations, and we’re growing fast! Our team also includes some of the best digital modelers and BIM specialists in the industry, working with the latest tech on projects worth billions of dollars.

We are a software development studio of over 140 people, backed by one of Canada’s top construction firms, with over 70 years of industry experience and completing over $5 billion of work annually. We develop software that addresses real-world problems on some of Canada's largest construction projects.

The successful candidate will have extensive experience supporting information security programs of varying sensitivity, tailored to client requirements. They will be skilled in developing, updating, maintaining, and reviewing IT security policies, standards, and procedures, ensuring they align with regulatory, legal, contractual requirements, and industry best practices.

As an Information Security Analyst, you will:

• Develop, update, maintain, and review IT security policies, standards, and procedures to ensure compliance with regulatory and industry standards.
• Understand relevant regulations, industry standards, and government contract IT security requirements.
• Collaborate across all levels of the organization to conduct risk assessments of existing and new technology assets, evaluate and deploy new technology projects, and review vendor contracts.
• Develop and implement risk mitigation strategies and controls.
• Monitor and report on risk levels, assessments, and compliance status.
• Provide guidance and training to staff on compliance requirements and best practices.
• Work closely with IT teams (Service Delivery, Operations, DevOps) to facilitate the secure design and implementation of new IT systems and processes.
• Participate in data governance initiatives.
• Review and advise on IT-related contract requirements.

This role is ideal if you have:

• At least 5 years of relevant work experience.
• Post-secondary education in IT, Cyber Security, or relevant industry experience.
• Experience in Information Security, Governance, Risk & Compliance.
• Deep knowledge of industry frameworks & certifications, including NIST.
• Strong organizational skills with attention to detail.
• Experience supporting government or federal sensitive projects.
• Ability to obtain Level II (Secret Clearance) with the Government of Canada, supported by EllisDon, for continued employment.
• Willingness to work at EllisDon’s Mississauga (1004 Middlegate Rd #1000, Mississauga, ON L4Y 1M4) or London (2045 Oxford St E, London, ON N5V 2Z7) offices.

EllisDon is proud to offer a unique career opportunity with continuous learning, growth prospects, and a competitive compensation package within an environment committed to inclusion and diversity.