Posting closes:
May 21, 2025
Employment Status:
Permanent, Full-time (37.5 hours per week)
Additional Information:
We welcome applications from all Canadian residents. However, preference will be given to candidates residing in Alberta. Please note that this position requires attendance at monthly in-person team meetings.
Servus is growing! We are currently looking for a
Information Services Governance & Compliance Specialist within our
Information Services department in Edmonton, Alberta.
Servus Credit Union is Alberta's largest member-owned credit union, known for building strong, resilient communities by helping our members feel good about their money. One of Canada's Best Managed Companies for 20 consecutive years and ranked as one of the top banks in Canada on Forbes World's Best Banks list for two years in a row, we are a team of smart, gutsy, and driven individuals.
The IS Governance and Compliance Specialist, under the direction of the Lead, GRC, will design, develop, and maintain a corporate program to manage and respond to audit requests and exercises (IT/IS/Security controls). These will include, but are not limited to, internal audit assessments, annual financial statement audits, and regulator and industry audits.
Additionally, this position will collaborate with the Leader of Cards regarding PCI-DSS compliance, ensuring Servus' good standing with PCI-DSS. This includes internal controls as well as validation and verification of controls for external partners and providers.
The scope of your responsibilities will include, but are not limited to:
Governance Program
- Scope, develop, and implement IT governance framework across the organization.
- Manage effectiveness of audit responses and drive remediation. Perform root cause analysis and implement continuous improvement processes. (Only leave this in if no ‘Interim Lead' role is filled.)
- Ensure IT Security projects align with business strategy and objectives.
- Identify risks and recommend risk mitigation strategies.
- Develop, monitor, and report on security performance metrics.
- Develop and implement IT policies and procedures to promote secure, cost-effective operations.
- Provide guidance on IT risk management, including disaster recovery planning.
Regulatory Compliance
- Manage operational effectiveness of security controls within compliance frameworks and drive remediation. Perform root cause analysis and continuous improvement.
- Develop metrics to report on compliance performance.
- Maintain in-depth knowledge of current and emerging regulatory trends.
- Ensure compliance with all applicable laws and regulations at provincial and federal levels.
- Provide feedback and escalate issues related to the compliance framework and security controls.
- Seek efficiencies while maintaining regulatory standards.
- Monitor and lead changes to compliance frameworks.
- Collaborate with internal stakeholders such as AML, Privacy, and Payments to monitor security controls.
Business Processes
- Apply expertise to prioritize and plan in line with Audit and Compliance policies.
- Keep the Lead, GRC informed of relevant developments.
- Ensure third-party provider guidelines are followed.
- Provide reporting and analysis on PCI-DSS compliance to the Director Payments.
Teamwork
- Work effectively in a dynamic environment.
- Maintain respectful relationships across departments.
- Build and sustain organizational relationships.
- Contribute positively to team morale.
- Collaborate to achieve shared goals.
- Be flexible, versatile, and dependable.
Requirements
- Minimum of 5-7 years in Information Security and Risk roles.
- Desired certification: CISSP.
- Experience with frameworks like NIST, OSFI B13, COBIT, ITIL.
- Strong knowledge of regulatory requirements.
- Analytical and problem-solving skills.
- Effective collaboration with internal and external partners.
- Self-motivated with minimal supervision.
Preferred Certifications
Education and Training
- Minimum undergraduate degree in business or related field, with ongoing education in accounting or financial analysis.
Benefits
Working for Servus offers outstanding benefits, including health, wellness, vacation, retirement savings, and more. Additional perks include:
- Training & Development
- Career growth opportunities
- Flexible work options
- Competitive pay and incentives
- Meaningful work and community involvement
For more details about these benefits,
click here.
As a member of Servus, employees enjoy benefits like profit sharing, voting rights, and exclusive services.
Next Steps
Only shortlisted applicants will be contacted. Please inform us if accommodations are needed during the hiring process.
Join our diverse team and find a sense of belonging at Servus, where your skills and passions can thrive!