IS Service Owner for Specialized Assessments

Quintall; Vancouver; Hybrid; CAD 140,000 - 190,000; Full time

Job summary

ABB zoekt een ervaren Lead Information Security, Risk & Compliance om beveiligings- en nalevingsdiensten te leiden, risico’s samen met stakeholders te identificeren en af te stemmen op bedrijfsdoelstellingen. De rol vereist diepgaande kennis van beveiligings- en compliancerisico's en een proactieve houding ten aanzien van continue verbetering.

De positie werkt in hybride model en vereist sterke samenwerking met globale teams, auditors en regulators om een veerkrachtige beveiligingshouding te

Qualifications

• 10+ jaren ervaring in security en compliance
• 4+ jaren in leiderschap
• Bachelor's degree in IT / Cybersecurity of gelijkwaardig
• Invloed op security en compliance risk assessments en advisering

Responsibilities

• Leiden van security- en compliance assessments samen met bedrijfsstakeholders
• Verantwoordelijk voor levering van security- en compliance-doelstellingen en deliverables
• Vastleggen van assessmentdocumentatie, bevindingen en rapporten ter ondersteuning van audits en reglementaire vereisten
• Sturen doorlopende verbeteringen in security- en complianceprocessen, -methoden en -hulpmiddelen
• Samenwerken met globale en cross-functionele teams voor consistente governance en risicobeheersing

Skills

Security governance

Risk management

Compliance frameworks

Leadership

Education

Bachelor's degree in IT / Cybersecurity

Tools

CISA

CISM

ITIL Foundation

CRISC

Job description

Bij ABB helpen we industrieën beter te presteren - slanker en schoner. Vooruitgang is hier een verwachting - voor jou, je team en de wereld. Als wereldwijde marktleider geven we je wat je nodig hebt om dat waar te maken. Het zal niet altijd gemakkelijk zijn, groeien vergt lef. Maar bij ABB sta je er nooit alleen voor. Doe wat de wereld doet draaien.

Deze functie rapporteert aan:

IS Department Manager for Compliance and Risk Advisory

Job role :

Leads defined service line(s) in the design and development of end-to-end lifecycle roadmap so that it aligns with the vision that is created by the Business Owner and IS goals and objectives. The Service Owner is accountable for the delivery of a specified IS service and is responsible for the service management of a specified service in the organization.

The Information Security, Risk, and Compliance team is responsible for protecting the organization's information assets by implementing and maintaining effective security, risk management, and compliance practices. The team works closely with business and technology stakeholders to identify, assess, and mitigate cybersecurity risks while ensuring adherence to organizational policies, industry standards, and regulatory requirements. Through security assessments, compliance reviews, governance activities, and continuous monitoring, the team helps strengthen the organization's security posture and supports secure business operations. Additionally, the team drives continuous improvement initiatives, maintains audit readiness, and collaborates across global and cross-functional teams to safeguard critical systems, data, and infrastructure against evolving cyber threats.

• The work model for the role is: #L1-Hybrid
  
• Lead security and regulatory compliance assessments in partnership with business stakeholders to identify, evaluate, and mitigate risks while ensuring alignment with organizational policies, industry standards, and applicable regulations.
• Provide subject matter expertise in security governance, risk management, and compliance frameworks, enabling consistent assessment outcomes and informed risk-based decision-making.
• Own the delivery of security and compliance objectives, service targets, and key deliverables, ensuring timely execution and high-quality results across assigned workstreams.
• Establish and maintain comprehensive assessment documentation, findings, control evidence, and reports to support audits, assurance activities, and regulatory requirements.
• Drive continuous improvement initiatives by enhancing security and compliance processes, controls, methodologies, and tools to strengthen organizational resilience and operational efficiency.
• Collaborate with global and cross-functional teams to deliver consistent governance, risk, and compliance services, manage enterprise security risks, and contribute expert guidance to strategic programs and initiatives.

Qualifications for the Role :

• 10+ years in security and compliance roles in which 4+ years in leadership
• Bachelor's degree in IT / Cybersecurity or similar
• Influence on security and compliance risk assessments and advisory

provided to business areas

• CISA and/ or CISM, ITIL Foundation, CRISC
• Provides end-to-end security and compliance services across the
• organization. Responsible for performing security and compliance risk
• assessments, enabling control implementation, and ensuring regulator alignment (SOX, Trade Compliance)

Wij waarderen mensen met verschillende achtergronden. Zou dit jouw verhaal kunnen zijn?