Senior Compliance Officer

Kelly; Ottawa; Hybrid; CAD 69,000 - 73,000; Full time

Benefits offered by this job

Extended healthcare

Dental

Life insurance

Emergency travel assistance

Vacation pay

Job summary

Kelly is seeking a Senior Cloud Services Compliance Officer in Ottawa for a hybrid role (3 days in office). The position focuses on leading cybersecurity compliance initiatives across Cloud Services, audits, regulatory obligations, and privacy programs.

The role collaborates with senior leaders, auditors, customers, and cross-functional teams to strengthen compliance, mitigate risk, and ensure alignment with ISO/IEC standards and data privacy requirements across jurisdictions.

Qualifications

• 7+ years in cybersecurity compliance or information security, preferably in cloud services.
• Experience leading internal and external audits, risk assessments, and remediation programs.
• Deep knowledge of ISO 27001/27017/27018, SOC 2, GDPR, PCI DSS, FedRAMP and related frameworks.

Responsibilities

• Lead cybersecurity compliance programs and act as primary contact for audits.
• Coordinate audits with internal/external auditors and regulatory bodies.
• Develop and maintain governance, risk, and compliance documentation.
• Provide compliance guidance to sales, product, and engineering teams.

Skills

Cybersecurity compliance

Audit management

Regulatory alignment

Stakeholder collaboration

Risk assessment

Education

CISA

CISM

CRISC

ISO 27001 / 27017 / 27018

Tools

AWS

Azure

GCP

Job description

Senior Cloud Services Compliance Officer

Location: Ottawa, ON (500 Palladium Drive)

Work Model: Hybrid — 3 days per week in office

Hours: Monday–Friday, 9:00 AM–5:00 PM

Pay Rate: $50.00–$53.00 per hour

Position Summary

We are seeking a Senior Cloud Services Compliance Officer to lead cybersecurity compliance initiatives across Cloud Services. This role is responsible for managing complex audit activities, customer security and compliance assessments, regulatory obligations, and internal security and privacy programs.

The successful candidate will work closely with senior business leaders, technical teams, auditors, customers, and external stakeholders to strengthen compliance practices, mitigate risk, and ensure alignment with internal policies, industry standards, and regulatory requirements across multiple jurisdictions.

Key Responsibilities

Cybersecurity Compliance Programs

• Serve as the primary point of contact for compliance and audit activities within assigned Cloud Services.
• Build trusted partnerships with Cloud Services teams and provide practical compliance guidance.
• Lead interactions with internal auditors, third-party auditors, and external regulatory bodies.
• Support the development, implementation, and maintenance of compliance programs aligned with organizational strategy and regional regulatory requirements.

Audit Strategy and Execution

• Lead the preparation, coordination, and execution of internal and external audits.
• Develop proactive, risk-based audit strategies aligned with business priorities and continuous-improvement objectives.
• Ensure Cloud Services adhere to corporate policies, security standards, industry frameworks, and regulatory requirements.
• Track audit findings, remediation actions, and corrective action plans through completion.

Risk Management and Controls

• Enhance risk management practices and internal controls across assigned Cloud Services.
• Support and improve controls relating to Change Management, Business Continuity Planning (BCP), and Disaster Recovery (DR).
• Maintain governance, risk, and compliance documentation, including required ISMS, ISO 27001, ISO 27017, and ISO 27018 materials.
• Identify control gaps and recommend remediation approaches that balance compliance, operational efficiency, and business needs.

Policy Development and Process Improvement

• Support the development, review, and implementation of cybersecurity compliance policies, standards, and procedures.
• Recommend and drive policy and control improvements to strengthen the Cloud Services compliance posture.
• Assess and refine compliance workflows to improve audit readiness, efficiency, risk mitigation, and alignment with evolving frameworks.

Global Compliance Management

• Partner with cross-functional teams to assess cybersecurity and privacy compliance requirements across jurisdictions.
• Support adherence to local and global regulations, including GDPR, CCPA, and related data privacy obligations.
• Assist with global compliance strategies and help ensure cross-border data transfers align with corporate policies and applicable standards.

Business Advisory and Customer Support

• Provide compliance guidance to sales, presales, product management, and other business functions.
• Support responses to RFPs, RFIs, customer security questionnaires, and client compliance inquiries.
• Act as a senior advisor on complex security and compliance matters, including risk mitigation and regulatory adherence.
• Engage directly with key customers to address compliance and security questions and support trust-building initiatives.

Monitoring and Reporting

• Oversee ongoing monitoring of compliance programs to ensure continued effectiveness and alignment with security and business goals.
• Prepare and deliver regular reports to senior leadership on audit outcomes, risk areas, corrective actions, and compliance status.
• Communicate relevant audit requirements and results to customers, partners, and regulatory stakeholders as needed.

Minimum Qualifications

• 7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
• Demonstrated experience independently leading internal and external audits, risk assessments, remediation activities, and corrective action plans.
• Strong practical knowledge of security and compliance standards, including:
  • ISO 27001
  • ISO 27017 and ISO 27018
  • SOC 2
  • FedRAMP
  • CSA
  • PCI DSS
  • Data privacy regulations, including GDPR
• Solid understanding of cloud environments and cloud security fundamentals across AWS, Microsoft Azure, and/or Google Cloud Platform.
• Proven ability to communicate and collaborate effectively with business units, senior leadership, auditors, regulators, customers, and technical teams.

Preferred Qualifications

• 7–10 years of experience in cybersecurity compliance, information security, or risk management.
• Experience supporting cloud computing, SaaS, or enterprise technology environments.
• Professional certifications such as CISA, CISM, CRISC, or equivalent.
• Strong working knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, NIST, and related security and privacy frameworks.
• Experience leading complex audits in partnership with legal, privacy, operations, security, and technical teams.
• Excellent written, verbal, presentation, and stakeholder-management skills.
• Strategic mindset with the ability to connect compliance priorities to business objectives, risk reduction, and continuous improvement.

Benefits

• extended healthcare (drug plan, professional and medical services)
• dental
• life
• emergency travel assistance
• holiday and vacation pay in accordance with provincial labour law.

Please note: The following benefits reflect Kelly's general offerings. Eligibility may vary by assignment, location and job type.

About Kelly

Work changes everything. And at Kelly, we’re obsessed with where it can take you. To us, it’s about more than simply accepting your next job opportunity. It’s the fuel that powers every next step of your life. It’s the ripple effect that changes and improves everything for your family, your community, and the world. Which is why, here at Kelly, we are dedicated to providing you with limitless opportunities to enrich your life-just ask the 300,000 people we employ each year.

Kelly is committed to providing a workplace environment that is inclusive and respects the dignity of those in our workforce. Consistent with that commitment, Kelly will ensure that persons who are otherwise able to work are not unfairly excluded from doing so based upon any grounds protected by applicable human rights legislation, and will make all reasonable efforts to accommodate the needs of applicants and employees in all employment processes including but not limited to, hiring, advancement, discharge, compensation, or training.

Kelly may use AI-powered tools during the recruitment and hiring process. For full details, including how Kelly uses AI, your rights, and how to request a reasonable accommodation, visit the Recruitment Artificial Intelligence Notice.