InfoSec & Compliance Lead — ISO 27001 / SOC 2

Socket.dev; Mississauga; On-site; CAD 120,000 - 180,000; Full time

Job summary

PACT seeks an experienced information security leader to own the ISO 27001:2022 and SOC 2 Type 2 initiatives, coordinating a unified control program across multiple teams. You will author policies, maintain risk registers, and ensure evidence is complete for external attestations.

You will drive security architecture input, manage third‑party assurance, and report status to the IT Steering Committee while coordinating budget and vendor selection.

Qualifications

• 7–10 years of experience in information security, IT compliance, governance, risk and/or audit.
• Bachelor's degree in information technology, information security or a related discipline preferred.
• Demonstrated ownership of ISMS or similar certifications (ISO 27001, SOC 2) is desirable.
• Hands-on Microsoft 365 security administration across Entra ID, Purview and Defender.

Responsibilities

• Own ISO 27001:2022 and SOC 2 Type 2 readiness initiatives with the Q1 2027 target.
• Maintain ISMS documentation, risk register and evidence inventory with formal controls.
• Coordinate third‑party and member-company assurance, vendor security reviews and attestations.
• Lead incident response planning, security architecture input and governance reporting.

Skills

Information security governance

Policy authoring

Risk assessment

Vendor security

Stakeholder reporting

Education

Bachelor's degree in IT/security

Tools

Microsoft 365 security administration

Entra ID

Purview

Defender

Job description

PACT seeks an experienced information security leader to own the ISO 27001:2022 and SOC 2 Type 2 initiatives, coordinating a unified control program across multiple teams. You will author policies, maintain risk registers, and ensure evidence is complete for external attestations.

You will drive security architecture input, manage third‑party assurance, and report status to the IT Steering Committee while coordinating budget and vendor selection.