Remote Cybersecurity GRC Audit Specialist

NTT DATA; Canada; Remote; CAD 120,000 - 180,000; Full time

Job summary

NTT DATA seeks a Cybersecurity Audit & Compliance Specialist to support audit readiness and regulatory compliance. This REMOTE role primarily serves the Ottawa, Ontario area, coordinating evidence collection and documentation.

You will work with cross-functional teams to manage audits, certifications, and remediation actions, ensuring alignment with ISO 27001, SOC, and other security standards across the enterprise.

Qualifications

• 7+ years of experience in cybersecurity audit, governance, risk and compliance (GRC).
• 3+ years supporting ISO/IEC 27001 and related controls.
• 3+ years assisting internal/external audits and security certification programs.
• 5+ years collecting, reviewing, and documenting audit evidence.
• Familiar with SOC, Cyber Essentials, ENS, NIST or similar standards.

Responsibilities

• Support cybersecurity audit, compliance, and certification projects and ensure timely deliverables.
• Coordinate ISO 27001, ENS, Cyber Essentials, SOC and other frameworks.
• Prepare for internal and external audits and manage audit lifecycle stages.
• Collaborate with cross-functional teams, auditors, and vendors to compile evidence.
• Guide stakeholders on compliance expectations by analyzing requirements across standards.
• Identify gaps and non-compliances and track remediation actions.
• Review vendor and customer contracts for alignment with security policies.
• Maintain audit-ready documentation and evidence repositories.

Skills

GRC

ISO 27001

Audit evidence collection

Regulatory compliance

Vendor contracts review

Communication skills

Certifications (CISA/CISSP/CRISC)

Job description

NTT DATA seeks a Cybersecurity Audit & Compliance Specialist to support audit readiness and regulatory compliance. This REMOTE role primarily serves the Ottawa, Ontario area, coordinating evidence collection and documentation.

You will work with cross-functional teams to manage audits, certifications, and remediation actions, ensuring alignment with ISO 27001, SOC, and other security standards across the enterprise.