Sr. Compliance Officer

Robertson & Company Ltd.; Ottawa; Hybrid; CAD 72,000 - 83,000; Full time

Job summary

Robertson & Company Ltd. in Ottawa, ON is seeking a Sr. Compliance Officer to support cybersecurity compliance programs, audits, and regulatory adherence across cloud services. This is a 12-month contract with hybrid work arrangements, starting at CAD 56 per hour.

The role partners with senior leadership to strengthen controls, manage audits with regulators and external auditors, and develop global compliance strategies aligned with GDPR, NIST, and ISO 27001 standards.

Qualifications

• 7-10 years in cybersecurity compliance or information security.
• Cloud or SaaS experience preferred.
• Certifications: CISA, CISM, CRISC preferred.
• Knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, NIST.

Responsibilities

• Manage all compliance and audit activities related to assigned Cloud Services.
• Lead interactions with auditors and regulatory bodies; ensure efficient audit processes.
• Develop and maintain compliance programs to meet regulatory requirements.
• Lead internal and external audits; ensure alignment with policies and standards.
• Develop audit strategies; ensure proactive, risk-based audits.
• Improve risk management and controls for assigned Cloud Services.
• Support and improve change management, BCP, and DR related controls.
• Update governance, risk management, and compliance documentation (ISMS 27001, ISO 27017/18).
• Develop cybersecurity policies and procedures to improve internal controls.
• Drive implementation of cybersecurity standards aligned with business objectives.
• Refine compliance workflows to match evolving frameworks.
• Collaborate across teams to analyze cybersecurity requirements and regulations.
• Support global compliance strategies and cross-border data transfer compliance.
• Provide guidance on cybersecurity compliance for RFPs, RFIs, and client inquiries.
• Be the primary advisor on complex compliance topics and risk mitigation.
• Engage with key customers to address compliance questions and build trust.
• Communicate audit results to stakeholders; oversee ongoing monitoring of programs.
• Provide regular compliance reports to senior management; track corrective actions.

Skills

Cybersecurity compliance

Audit leadership

Regulatory knowledge

Communication skills

Education

CISA

CISM

CRISC

Job description

Our client is a top financial institution with significant North American holdings. They have operations across most major verticals, including institutional & corporate, wealth management, private clients, commercial banking, treasury, and retail banking.

Introduction

Robertson is seeking a skilled Sr. Compliance Officer to join our client in support of an existing vacancy.

Contract Period: 12 months

Pay Rate: Starting form $56 per hour

Location: Ottawa, ON

Location Type: Hybrid

Business Hours: Monday-Friday, 9:00 AM – 5:00 PM

Job Responsibilities

• Serve as the point of contact for managing all compliance and audit activities related to assigned Cloud Services, acting as a trusted partner to the assigned Cloud Services
• Lead interactions with both internal and external auditors (including external regulatory bodies, internal Thales auditors, and third-party auditors), ensuring efficient and effective audit processes
• Support the development, implementation, and maintenance of compliance programs to meet the organization's strategic objectives and regional regulatory requirements
• Lead the preparation and execution of internal and external audits across assigned Cloud Service, ensuring compliance with established corporate policies/standards, industry standards, and regulatory requirements
• Develop and implement audit strategies for the assigned Cloud Services, ensure audits are proactive, risk-based, and aligned with business priorities, while ensuring a continuous improvement approach
• Lead and enhance the risk management and improve controls for assigned Cloud Services, ensuring compliance with both internal policies and external regulatory requirements
• Support and improve the Cloud Services Change Management, Business Continuity Plan (BCP), and Disaster Recovery (DR) related controls to ensure compliance with corporation policies/standards and business continuity regulations and best practices
• Maintain and update key governance, risk management and compliance documentation, including ISMS 27001, ISO 27017/18 mandatory documents, ensuring alignment with corporate policy and evolving industry standards
• Support the develop, review, and implement cybersecurity compliance policies, standards and procedures to ensure continuous improvement of internal controls, audit readiness, and risk mitigation
• Recommend and drive the implementation of cybersecurity policies and standards aimed at improving Cloud Services’ compliance posture, ensuring policies are aligned with business objectives and regulatory expectations
• Regularly assess and refine compliance workflows to optimize efficiency and alignment with evolving compliance frameworks
• Partner with cross-functional teams in analysing cybersecurity compliance requirements cross functions, ensuring adherence to local and international regulations (e.g., GDPR, CCPA, etc.)
• Support the development of global compliance strategies, ensuring supported Cloud Services units are aware of evolving global cybersecurity and privacy laws and that cross-border data transfers are compliant with corporate policies and standards
• Provide cybersecurity compliance guidance and support to sales, presales, product management, and other business units on cybersecurity compliance-related matters, including RFPs, RFIs, security & compliance questionnaires, and client security inquiries
• Be the primary advisor to assigned Cloud Services on complex compliance and security topics, providing recommendations for risk mitigation, process improvements, and regulatory adherence
• Engage directly with key customers to address complex compliance and security questions, and to support ongoing trust-building initiatives
• Ensure the communication of compliance requirements and audit results to relevant stakeholders, including customers, partners, and regulators
• Oversee the ongoing monitoring of compliance programs to ensure that they remain effective and aligned with the organization’s security goals and business objectives
• Develop and provide regular compliance reports to senior management, highlighting audit results, risk areas, and the status of corrective actions

Experience & Qualification Requirements

• 7-10 years of experience in cybersecurity compliance, risk management, or information security experience required
• Experience in cloud computing or SaaS environments is highly preferred
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar certifications are strongly preferred
• Strong knowledge and practical experience with ISO 27001, SOC 2, PCI DSS, and other relevant frameworks (e.g., GDPR, NIST)
• Proven experience in leading complex audits, with the ability to work closely with senior leadership, legal, data privacy, operations, and technical teams
• Excellent written and verbal communication skills, with the ability to present complex compliance and audit findings to both technical and non-technical stakeholders
• Ability to take a strategic approach to compliance management, with a focus on risk mitigation, continuous improvement, and aligning compliance initiatives with business goals

Background screening is required as part of the onboarding process. The type of screening required (criminal, credit, or other verifications) will vary based on the position and client requirements.

We use AI technology as part of our application review process to assist with screening and assessment. All applications are also reviewed by our recruitment team.

Robertson & the clients we represent are equal opportunity employers, committed to diversity and inclusion. Robertson is a certified diverse supplier and actively seeks to foster a representative and inclusive workforce. We welcome applications from all qualified individuals, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, Aboriginal status, or any other legally protected factors. We champion building a diverse and inclusive environment.