IT Governance, Risk, and Compliance Analyst

Jobtailor; Ottawa; On-site; CAD 90,000 - 120,000; Full time

Job summary

Jobtailor in Ottawa is seeking an experienced cybersecurity compliance professional to conduct reviews, collect evidence, and translate standards into actionable tasks across the Lightspeed system lifecycle.

You will work with Engineering, IT, and QA teams to validate controls and document findings while tracking remediation efforts and risk escalation. A strong background in risk, governance, and regulatory frameworks is essential.

Qualifications

• Requires 3+ years supporting cybersecurity, governance, risk, audit or information security programs.
• Experience with cybersecurity controls and compliance requirements.

Responsibilities

• Conduct cybersecurity compliance reviews across lifecycle milestones.
• Gather, analyze, and maintain compliance evidence through interviews and reviews.
• Translate regulatory requirements into actionable compliance activities.
• Collaborate with engineering and product security to verify controls.
• Track findings, remediation, and action items; report risks.

Skills

Cybersecurity governance

Risk management

Compliance assessment

Documentation review

Analytical skills

Education

Bachelor's degree in CS/Engineering/IT/C cybersecurity or related field

Diploma or equivalent experience

Tools

GRC tools

Audit management tools

Compliance tracking tools

Job description

• Conduct cybersecurity compliance reviews throughout the Lightspeed system lifecycle, including TRR, PDR, CDR, and other program milestones
• Gather, analyze, and maintain compliance evidence through interviews, documentation reviews, walkthroughs, and control validation activities
• Interpret cybersecurity and regulatory requirements and translate them into actionable compliance activities
• Collaborate with Engineering, Product Security, IT, and testing teams to verify cybersecurity controls are implemented and effective
• Track compliance activities, findings, remediation efforts, and action items
• Support implementation and maintenance of cybersecurity controls required to meet applicable obligations
• Monitor changes to cybersecurity standards and regulations and support compliance updates
• Prepare and maintain compliance documentation, assessment records, evidence repositories, and reports
• Provide guidance to cross-functional teams on compliance requirements, control implementation, and evidence collection
• Monitor and report on compliance activities, findings, and risks, escalating significant risks as appropriate

Requirements

• Diploma or Bachelor's Degree in Computer Science, Engineering, IT, Cybersecurity, or related field, or equivalent experience
• 3+ years supporting cybersecurity, compliance, governance, risk management, audit, assurance, or information security programs
• Experience assessing cybersecurity controls and compliance requirements
• Experience with NIST 800-53, NIST 800-171, ISO 27001, CMMC, or similar frameworks
• Experience coordinating with technical and business stakeholders
• Strong analytical, organizational, and communication skills
• Knowledge of cybersecurity governance, risk management, compliance, and control assurance principles
• Experience reviewing technical documentation, system designs, security controls, and implementation evidence
• Certifications such as CISA, CRISC, Security+, CGRC, or ISO 27001 Lead Auditor are assets
• Knowledge of CNSSP-12 or CAIQ is an asset
• Experience with GRC, audit management, evidence management, or compliance tracking tools is an asset

Core Competencies

Demonstrates expertise in cybersecurity compliance, risk management, and governance, with a strong ability to analyze and implement controls based on frameworks such as NIST and ISO. Proficient in collaborating with cross-functional teams to ensure effective compliance and documentation practices.

Highest-signal resume keywords

• Cybersecurity Compliance
• NIST 800-53
• ISO 27001
• Risk Management
• CISA

Hard Skills

• Cybersecurity Governance
• Compliance Assessment
• Control Validation
• Technical Documentation Review
• Evidence Collection

Soft Skills

• Analytical Skills
• Organizational Skills
• Communication Skills

Certifications & Qualifications

• CISA
• CRISC
• Security+
• CGRC
• ISO 27001 Lead Auditor

Industry Keywords

• Cybersecurity Standards
• Compliance Documentation
• Control Assurance
• Governance Frameworks
• Risk Assessment

Tools & Technologies

• GRC Tools
• Audit Management Tools
• Compliance Tracking Tools