Hybrid Security Compliance Analyst

Payments Canada; Toronto; Hybrid; CAD 71,000 - 96,000; Full time

Benefits offered by this job

Hybrid work environment

Health and dental benefits

Paid time off and parental leave

Professional development opportunities

Job summary

Payments Canada is seeking a Security Compliance professional to carry out day-to-day duties under the Manager, Security Compliance. You will draft control statements, assess security controls, review exception requests, and support audits to ensure compliance with ISO/IEC 27001, SWIFT CSP and other regulators.

You will work with colleagues across divisions, promote security compliance, and help improve governance, risk management and third-party engagement controls in a dynamic, mission-driven

Qualifications

• Experience drafting and documenting control statements against policies and standards.
• Ability to assess and validate security controls across an organization.
• Familiarity with ISO/IEC 27001, NIST CSF, SWIFT CSP and related audits.

Responsibilities

• Draft and document control statements against policies, standards and regulatory guidelines.
• Carry out assessments and validation of security controls.
• Process and review Security Exception Requests and document gaps and compensating controls.
• Promote day-to-day compliance with internal policies and external requirements.
• Support security related audits (ISO/IEC 27001, SWIFT CSP) with evidence gathering and reporting.
• Coordinate with Procurement, Vendor Management and TPRM for third-party risk reviews.
• Prepare reports and slide decks on control assessment results for management.

Skills

Information security

Risk management

Policy understanding

Communication

Education

Post-secondary degree in IT or security

Job description

Payments Canada is seeking a Security Compliance professional to carry out day-to-day duties under the Manager, Security Compliance. You will draft control statements, assess security controls, review exception requests, and support audits to ensure compliance with ISO/IEC 27001, SWIFT CSP and other regulators.

You will work with colleagues across divisions, promote security compliance, and help improve governance, risk management and third-party engagement controls in a dynamic, mission-driven