Sr Advisor, Risk & Compliance

WestJet; Calgary; On-site; CAD 90,000 - 120,000; Full time

Job summary

A major Canadian airline in Calgary is seeking a Sr Advisor, Risk & Compliance to ensure information security requirements inform large IT initiatives. The ideal candidate has a Master’s Degree and at least 8 years of experience in Information Security with relevant certifications. This role offers a full-time position with competitive benefits including travel privileges and a friendly culture.

Benefits

Flexibility in Benefits programs

Travel privileges for employees

Collaborative workplace culture

Qualifications

• 8+ years of Information Security experience preferred.
• A minimum of 1 Information security certification is required.
• In-depth knowledge of Information Security risk and ITGC Controls.

Responsibilities

• Ensure information security requirements are included in IT initiatives.
• Provide advice on information security-related risks and controls.
• Monitor remediation of assessment findings.

Skills

Information Security risk management

Project management

Interpersonal communication

Problem-solving

Education

Master’s Degree in a relevant field

Tools

CISSP certification

CRISC certification

NIST cybersecurity framework

ISO 27001

Job description

Employment Type: Full-time Regular

City: Calgary, AB (YYC)

Posting Open Date: 10/31/2025

Posting Close Date: 11/13/2025 (Postings close at 11:59pm MST)

Why WestJet

Every WestJet journey has the potential to enrich lives; a career with us is no exception. WestJet arrived on the Canadian airline scene in 1996 and changed the industry for the better. We made air travel more affordable for Canadians and now we're going global.

Join us, this is where your career story takes off.

Overview of role

The Sr Advisor, Risk & Compliance is accountable to ensure that information security requirements are included when an IT or business initiative of large scope or high complexity is being conceptualized OR evaluated and continues to provide advisory support for the lifecycle of the initiative ensuring all standards, policies and procedures pertaining to various Cybersecurity functions are adhered to.

Key deliverables / responsibilities

• Works with unique expertise and knowledge in Information Security and uses skills to identify information security related risks and controls to achieve organizational goals in creative and effective ways
• Provide information security requirements advice and counsel to project teams and the business ensuring alignment to policies, processes and standards.
• Provide consultation to strategic sourcing, legal personnel and any other stakeholders in the negotiation of information security related contractual clauses with suppliers.
• Monitor and track remediation of assessment findings.
• Provide information security subject matter expertise on design and controls to business and suppliers during findings remediation
• Raise information security exceptions and acceptances (as required) to ensure these are accurate and are supported by sound resolution plans.
• Escalate potential or unresolved information security issues to management for resolution, as appropriate
• Administer the risk register and ensure risk mitigations, plans and associated follow-up activities are performed by risk owners.
• Review and provide recommendations to information security policies, standards, guidelines/ processes.
• Work to develop / advise in the implementation and improvement of systems and processes to support continual improvement in compliance in the business.
• Act as a subject matter expert in the application of laws and regulations, industry frameworks and standards related to IT Compliance.
• Coordinates with internal and external auditors to facilitate meetings, provide evidence, consolidate procedures and ensure remediation is performed.
• Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
• Follow up on audit findings to ensure that management has taken corrective action(s).
• Contribute to compliance training program development for new and current employees and provide additional specific information security & privacy training to departments or roles/projects as needed.
• Analyze emerging industry standards and the latest/newest protocols to contribute to policies and governance development.
• Collaborate with business process owners in the management and maintenance of data classification processes.
• Produce metrics and analytics for management to gain insight for planning, design and to facilitate the identification of improvement opportunities.

Experience and qualifications

• Master’s Degree and 8+ years of Information Security experience preferred, or an equivalent combination of training and experience
• A minimum of 1 Information security certification (e.g. CISSP, CRISC, CISM, CIPT, CEH, SANS) is required
• In-depth knowledge of Information Security risk, ITGC Controls, supplier due diligence, etc. is required
• Excellent knowledge of and demonstrated ability to apply common frameworks and models used for Information Security Risk and Compliance, such as ISO 27001, NIST CSF, COSO and CobiT
• Excellent knowledge of regulations such as GDPR, PIPEDA, IATA IOSA and PCI DSS
• Excellent knowledge of industry standards on Policies, Standards and guidelines relating to information security risk
• Proficient knowledge and understanding of network security, application security, data security and cloud security domains is required
• Requires excellent problem-solving skills and good interpersonal and communication skills including influencing others
• Possess excellent consulting and analysis skills
• Possess excellent project management and time management skills

The benefits of being a WestJetter

• A fun and friendly culture with colleagues who work together to win
• Travel privileges for you and your family, effective from your start date
• Savings and Benefit programs that are flexible to meet your specific needs

Think we are a fit? Apply now!

About WestJet Group Of Companies

WestJet took to the skies in 1996 with just over 200 employees and three aircraft operating service to five destinations. Since then, WestJet has pioneered low-cost travel in Canada, cutting airfares in half, and increasing the flying population in Canada by more than 50 per cent. Following integration with Sunwing in 2025, more than 14,000 WestJetters support nearly 200 aircraft and connect guests to more than 100 destinations across North America, Central America, the Caribbean, Europe and Asia.

As a major Canadian employer that includes WestJet Airlines, Sunwing Vacations Group and WestJet Cargo, the WestJet Group is Canada’s leading low-cost airline and largest vacation provider, with a united purpose of providing affordable and accessible air and vacation travel to Canadians.

Our Safety Promise

At WestJet, the safety and security of our people and our guests is a core value and at the heart of what we do. As safety and security is a shared responsibility, it is expected that you will use safe work practices to ensure your well-being and the safety of others.

WestJet recognizes that the use of Alcohol and Drugs can adversely impact a safe work environment and the well‑being of others including guests, suppliers and the public, as well as place WestJet's operations at risk. All roles that are identified as safety sensitive are required to pass a Pre-Employment Alcohol and Drug Test as per WestJet's Alcohol and Drug Policy.

Our Commitment to Diversity and Inclusion

We embrace what makes us each unique, and what makes us uniquely WestJet. WestJet is committed to inclusiveness, equity, and accessibility and if you require accommodation during the selection process, please let our Talent Acquisition team know at [e-mail]. We encourage all qualified candidates to apply.

At WestJet, we welcome unique skills, experiences, and backgrounds - if you’re passionate and excited about this role, we encourage you to apply even if you do not meet every single qualification in the posting. We are committed to inclusivity, equity, and accessibility in the selection process. If you require an accommodation during the recruiting process, please let our Talent Acquisition team know.

We thank all applicants for their interest in WestJet; however, only those candidates who are selected will be contacted.

For more information about everything WestJet, please visit WestJet.com