Senior Security Assessor

Concord Technologies Inc.; Vaughan; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

401K plan w/ 6% company match (vests)

Flex-Time off

10 company holidays

Health benefits (Medical, Dental, Vis）

Paid Parental Leave

Udemy for Business

Life and AD&D

Unlimited Udemy for Business

Job summary

Concord Technologies is seeking a Senior Security Assessor to join our Cyber Risk & Security team. You will lead internal audits, build monitoring dashboards, and support security initiatives while addressing customer security questionnaires and due diligence requests.

You thrive in governance, risk, and compliance roles and will collaborate across functions to improve our security posture and regulatory alignment. This role emphasizes proactive risk management and continuous improvement.

Qualifications

• 4-6 years in information security, IT internal audit, compliance, or risk management.
• Hands-on with HITRUST and SOC 2 audits.
• Strong governance, risk, and compliance principles.
• Excellent communication, documentation, and organizational skills.
• Ability to manage multiple priorities and work independently.
• Experience with GRC tools, preferably Archer GRC.

Responsibilities

• Lead and execute internal security audits and assessments to ensure compliance with policies and standards.
• Monitor and report on control health and audit readiness, providing leadership visibility into security posture and risks.
• Complete and manage customer security questionnaires and due diligence requests.
• Support risk assessments and remediation efforts across the organization.
• Collaborate with cross-functional teams to drive security and compliance initiatives.
• Stay informed on regulatory requirements, security frameworks, and best practices.

Skills

Information security

Internal audit

Compliance

Risk management

HITRUST

SOC 2

GRC tools

Archer GRC

Tools

Archer GRC

Job description

Our fax-delivery suite of products allows our clients to exchange millions of patient information, insurance and other documents safely, swiftly and securely every business day. Concord's use of Artificial Intelligence, analytics, and other cutting-edge technology also analyzes the data being transferred within a fax, then delivers it into the right inboxes and workflows, fundamentally changing how data moves.

More than 2,300 healthcare organizations, financial providers, and companies in other equally document-intensive industries trust Concord to deliver their confidential and sensitive information. We care about our customers, and with a retention rate of more than 98%, it's clear they love the service and value we provide.

We have been in business since 1996 and growing faster than ever. Our products are getting smarter, our customers are getting bigger, and our user community is exploding. To continue meeting market demand and anticipating our customers’ needs, we are expanding our offerings. That means assembling a world-class team to take us through this next phase of growth. We hope you'd like to join us!

About the role

We are looking for a highly motivated Senior Security Assessor to join our Cyber Risk & Security team. In this role, you will play a critical part in maintaining and improving our security posture by conducting internal audits and assessments, building continuous monitoring dashboards, and supporting ongoing security and compliance initiatives. You will also assist with security-related legal reviews and respond to customer security questionnaires. This position is ideal for someone with a strong background in governance, risk, and compliance who thrives in a collaborative environment.

Essential Functions:

• Lead and execute internal security audits and assessments to ensure compliance with organizational policies and industry standards.
• Monitor and report on control health and audit readiness, providing leadership with visibility into compliance and security posture and potential risks.
• Complete and manage customer security questionnaires and due diligence requests.
• Support risk assessments and remediation efforts across the organization.
• Collaborate with cross-functional teams to drive security and compliance initiatives.
• Stay informed on regulatory requirements, security frameworks, and best practices.

Required Qualifications:

• 4-6 years of experience in information security, IT internal audit, compliance, or risk management.
• Hands-on experience with HITRUST and SOC 2 audits and frameworks.
• Strong understanding of security governance, risk, and compliance principles.
• Excellent communication, documentation, and organizational skills.
• Ability to manage multiple priorities and work independently.
• Experience with GRC tools, preferably Archer GRC

Preferred Qualifications:

• Experience with additional frameworks (ISO 27001, NIST, FedRAMP).
• Strong understanding of AI governance frameworks and principles.
• Knowledge of vendor risk management processes.
• Relevant certifications (e.g., CISSP, CISA, CRISC, HITRUST CCSFP).

Additional employee benefits at Concord Technologies:

• 401K plan w/ 6% company match (vests immediately)
• Flex-Time off + sick time
• 10 company holidays
• Full suite of health benefits (Medical, Dental, Vision) - employee only coverage covered at 100% (no employee cost). For employees + dependents, Concord covers 60% of premiums.
• Voluntary insurance options:
• Employee Life and AD&D
• Spousal Life and AD&D
• Child Life and AD&D
• Paid Parental Leave program
• Free unlimited ORCA card (Seattle area residents)
• Employee Rewards and Recognition through NectarHR
• Unlimited access to Udemy for Business

Concord Technologies is an Equal Employment Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.