Description
Internal Job Title : Senior IT Governance, Risk and Compliance Specialist and Auditor
Job Type : Permanent, Full-Time
Job Location : 18 Auriga Drive, Ottawa ON
Work Model : Hybrid
Position Summary
As a Senior IT Governance, Risk and Compliance Specialist and Auditor in our Corporate Information Security group, you will play a central role in developing, delivering and managing risk and compliance programs spanning our organization.
You will participateextensively in relevant IT Security projects that support the needs of the organization.
CBN designs and develops industry leading solutions for the following domains : Border Security, Civil Identity, Driver Identification and Vehicle Information, Currency and Excise Control, and Lottery and Charitable Gaming. To learn more, visit .
What We Can Offer You
Compensation : We seek long term relationships with our employees and recognize and reward them with a competitive total compensation package that includes : An industry leading defined contribution pension plan with company matching contributions (up to 5%) and payment of service fees,Best-in-class health, medical and life insurance benefits;
Access to virtual and telehealth services and apps; and Very progressive fertility, adoption and surrogacy benefits to support all definitions of family.
Career : As a knowledge-based organization we will provide you with a wealth of learning opportunities and challenging work that will grow your knowledge, skills and abilities.
At CBN, we encourage and empower our employees to chart their own career path, putting you in control of your future.
Culture : Personal character is the foundation of our culture. CBN’s 7 Core Principles shape and guide our behaviours and underpin the sense of community you will experience at CBN.
Equity, diversity and inclusivity are important to us as an organization, and we are committed to fostering and developing a work environment where every employee is treated with dignity and respect.
What You Will Do
Compliance Monitoring and Management : Framework Implementation : Plan and facilitate the development and implementation of emerging compliance programs as required by the organization.
Compliance : Design, develop, deliver and lead our compliance programs, ensuring our IT systems and procedures comply with industry standards and regulations such as ISO 27001, PCI, and SOC2.
Framework Evaluation : Create, evolve, implement and maintain risk and compliance frameworks. Update internal control frameworks, assess gaps, and work with cross-organizational stakeholders and external partners to maintain compliance.
Internal Policies : Create internal policies and procedures to meet emerging or evolving standards and as new technologies or threats are defined.
Risk Assessment and Management : Risk Program : Developand maintain our ongoing IT Security risk management program following CBN standard procedures.
Set program objectives, develop schedules and establish expectations.Identify and Evaluate Risks : Collaborate with cross-organizational stakeholders and SME’sthroughout the business to continuously assess IT risks.
Risk Documentation : Document identified risks and communicate them to relevant cross-organizational stakeholders, updating risk registers, following up with risk owners and reporting to executive committees as necessary.
Audit Planning Execution and Reporting : Design Audit Programs and Schedules : Create detailed internal audit plans and schedules that align with the organization’s compliance requirements.
Conduct Audits : Lead comprehensive audits of IT systems, applications, and processes to ensure they meet appropriate security and compliance standards.
Document Findings : Prepare detailed reports on audit findings, update registers, highlight areas of concern, and assess corrective actions to ensure they will meet compliance requirements.
Present to Management : Present findings to senior management, Executive and Risk and Compliance Committees, ensuring transparency and accountability.
Technical LeadershipSupport Other Compliance Resources : Provide guidance and support across our organization(s) and to other CBN compliance and risk resources, helping them develop their skills.
Training and Development : Coach junior compliance resources and other staff on IT audit and compliance practices and risk management.
Investigations : As required assist in investigating security events and participate in relevant root cause analysis development.
Continuous Improvement : Process Enhancement : Continuously seek ways to improve processes and methodologies to enhance efficiency and effectiveness.
Aid in the maturation and evolution of our company wide Governance, Risk and Compliance (GRC) tool.Supervise Corrective Actions : Oversee the implementation of corrective actions to ensure compliance issues are resolved effectively and promptly.
Various Other Duties and Responsibilities
Qualifications
Knowledge and Experience
- Bachelor’s degree in Information Systems (or similar) or equivalent combination of education and / or relevant work experience
- Certification in a relevant audit discipline : . BSI Lead Auditor, ISACA CISA, PECB Sr. Lead Auditor, PCI-ISA.
- Certification in one (or more) of the following compliance frameworks : ISO27001-2013 / 2022, ISO 14298, NASPO, PCI-DSS v4.0SANS, ISACA.
- Extensive experience in on (or more) of the following : SOC 1, SOC 2 (Type I and II), FedRamp, relevant ITSGs, CSA and CSA Star-II
- Comprehensive knowledge in multiple domains, including IT infrastructure, risk management, compliance and auditing standards
- Excellence in translating complex compliance requirements to business leaders.
- Comprehensive knowledge of industry recognized threat and risk management methodologies (HTRA, TRA, TVRP, ITSG-33)
- Comprehensive knowledge of Unified Compliance Frameworks and GRC tools
- Thorough knowledge of current security trends, threat vectors and cyber security TTPs
- 8+ years of experience in a relevant compliance, risk or auditing role
- 5+ years of experience in cyber and / or corporate security organization
- 5+ years of experience in developing and delivering compliance and risk assessments, creating, and presenting reports to executives and handling external auditors.
- Experience in IT operations or IT infrastructure desirable
Soft Skills and Abilities
- Critical thinking skills
- Organization and time management skills
- Interpersonal skills
- Coaching skills
- Teamwork and collaboration
- Growth mindset
Mandatory Requirements
- Fluency in English (fluency in Spanish is an asset)
- Ability to travel domestically. 6-8 weeks / year
Security Clearance Requirements
Ability to obtain and maintain Government of Canada Secret (Level II) personal security clearance.
About Us
As an Equal Opportunity Employer, Canadian Bank Note Company, Limited is committed to achieving a skilled workforce that reflects the diversity of the Canadian population.
We encourage applications from women, visible minorities, people with disabilities and Aboriginal people. Canadian Bank Note Company Limited is committed to developing inclusive, barrier-free selection processes and work environments.
Senior Auditor, IT Risk and Compliance
As a Senior Auditor, IT Risk and Compliance in our Corporate Information Systems group, you will play a central role in developing, delivering and managing the risk and compliance programs and activities while also investigating and participating in relevant IT security projects that support the bus...
Senior Manager - Governance, Risk and Compliance Services (Financial Services)
We analyze and assess an organization's business strategies and related business processes and systems to help management understand and address business objectives, requirements, risks, controls, and improvement opportunities. Advise clients in the Financial Services sector in designing and impleme...
Senior Estimator- Sewer and Watermain Works
City of Ottawa) along with private subdivisions and site plans. We are looking for a Team player, solid communication skills ( both verbal and written) , a driven individual with a passion for the contractor environment!. Competitive Salary based on experience ( $125,000 plus), Group Benefits, Compa...
Senior Infrastructure Analyst/Test Environment Management Specialist to support integration quality assurance and testing activities.
As a Test Environment Management Specialist, you will ensure that Vancity integrates quality assurance and testing activities throughout its software delivery process to ensure applications meet both functional and non-functional business requirements. Senior Infrastructure Analyst/Test Environment ...
IT Security VA Specialist
Experience in identification and evaluation of complex business and technology risks, establishment of internal controls which mitigate risks, and related opportunities for internal control improvement. The IT Security Vulnerability Analysis Specialist will provide insight and assistance to staff an...
Senior Secret SAP FI-CO Analyst to support Acquisitions, Master Data Governance and Payments for an in service support contract.
Developing and preparing SAP functional requirements specifications, developing designs per the specifications, configuration, end user support, defect resolution and conducting testing activities for all accounts payable functionality including invoice processing, acquisition card transactions, mas...
Contract Management Specialist- Structural Design & Construction
This may include the ability to work in a variety of environmental conditions, such as remote or isolated areas, working alone, and in inclement weather (within safe and reasonable limits). Review ongoing construction of the structure to monitor compliance with contract documents, identifying defici...
Distribution & Logistics - Senior Analyst/Analyst, Customer Logistics
This commitment applies to all candidates and employees regardless of race, ethnicity, citizenship, creed, place of origin, religion, sex, gender identity, gender expression, sexual orientation, family status, marital status, disability, age, and any other protected characteristic. Amenities - Addit...
Senior Sales Manager, National Security and Defence Leader - Canada Public Sector
Would you like to lead our National Security and Defence (NatSec) sector business in Canada? Would you like to create business strategies and build your own team focused on increasing awareness and adoption of Amazon Web Services (AWS) in the Security and Intelligence space? Do you have the business...
Senior Energy Professionals (Engineers/Architects)
Our employees lead committees charged with creating action plans for ensuring our firm’s social responsibility, including: Diversity, Equity & Inclusion Committee; Environmental Sustainability Committee; and Indigenous Action Plan Committee. JLR is a creative, tight-knit, and mentorship-focused comm...