Sr. Compliance Officer

Job Description

Position Summary

On behalf of our client, Procom is seeking a Senior Cloud Services Compliance Officer who will be responsible for leading and overseeing compliance initiatives for Cloud Services for a cloud services domain level, with a focus on managing complex audit processes, customer security and compliance assessments, regulatory compliance, and internal security and privacy programs. This individual will collaborate with senior management of a business units, and external stakeholders to ensure compliance with internal policies, industry standards, and regulatory requirements across multiple jurisdictions. The Sr. Compliance Manager will also play a critical role in supporting strategic direction for compliance practices, driving continuous improvement, and ensuring robust risk mitigation in Cloud Services operations.

Top Required Skills
-7+ years of experience in cybersecurity compliance, certifications, and audit management within cloud-services environments.
-Strong attention to detail, excellent organizational and multitasking skills, and the ability to work independently while leading and conducting internal and external audits. (looking for 5 years of experience leading audit)
-Senior-level capability to quickly learn new processes, take ownership of the audit lifecycle, and manage audits independently from planning through completion.
-Demonstrated ability to communicate effectively and collaborate with a broad range of internal and external stakeholders.
-Strong knowledge of and hands-on experience with leading information security standards and regulatory frameworks, including ISO 27001, ISO 27017/27018, SOC 2, FedRAMP, CSA, PCI DSS, and data privacy regulations such as GDPR

Minimum Requirements:
-7+ years of experience in cybersecurity compliance and certifications, preferably within cloud services environments.
-Proven experience independently leading and conducting internal and external audits, including risk assessments and remediation activities.
-Strong knowledge and experience working with industry-leading information security standards, such as: ISO 27001, ISO 27017/27018, SOC2, FedRAMP, CSA, PCI-DSS and Data Privacy Regulations (e.g. GDPR) 
-Solid understanding of cloud environments (e.g., AWS, Azure, GCP) and cloud security fundamentals.
-Demonstrated ability to effectively communicate and collaborate with a broad range of internal and external stakeholders, including business units, senior leadership, auditors, and regulators.

Preferred Qualifications
-Experience: 7-10 years of experience in cybersecurity compliance, risk management, or information security. Experience in cloud computing or SaaS environments is highly preferred.
-Certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar certifications are strongly preferred.
-Expertise in Standards & Frameworks: Strong knowledge and practical experience with ISO 27001, SOC 2, PCI DSS, and other relevant frameworks (e.g., GDPR, NIST).
-Leadership Skills: Proven experience in leading complex audits, with the ability to work closely with senior leadership, legal, data privacy, operations, and technical teams.

Location: Hybrid (Ottawa) – 3 days per week in the office. 
Duration: 12 Months
 

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.