Find work in Canada.

323,773 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 2 days ago
SPECIALIST, DEFENCE SUPPLY CHAIN DATA & ANALYTICS
BDC
Montreal, QC
Full-time
Advanced knowledge of: Data modelling Dashboard development DAX (Data Analysis Expressions) Semantic model design Data quality management Analytical integrity practices
Added 2 days ago
Intelligent P&ID Systems Specialist
Vista Projects Limited
Calgary, AB
Full-time
Practical experience using AI tools in a professional or technical environment, including LLM-based assistants for research, troubleshooting, documentation, data analysis, or workflow…
Added 2 days ago
Service Manager
LanceSoft, Inc.
Montreal, QC · Greater Montreal Metropolitan Area
Contract
Experience with Snowflake, SQL, data warehousing, or other enterprise data and analytics platforms.
Added 3 days ago
Email Marketing Specialist
ZenaTech Inc.
Toronto, ON
$55,000 to $65,000 CAD / year
Full-time
Conduct A/B testing and performance analysis across campaigns; monitor KPIs (deliverability, open rates, click-through rates, conversions, ROI) and implement data-driven optimizations
Added 3 days ago
Forward Deployed Engineer
Urban Ridge Supplies
ON · York
Full-time
This is a forward deployed engineer role, you own the technical health of your deployments end to end: when the AI gets something wrong, you find out why - digging through conversation…
Added 3 days ago
Forward Deployed Engineer
Urban Ridge Supplies
Toronto, ON
Full-time
A strong generalist engineer. You can ship full-stack TypeScript or Python on the backend, React on the frontend, SQL fluently, comfortable in someone else’s codebase within a day. You do…
Added 3 days ago
Forward Deployed Engineer
Urban Ridge Supplies
Toronto, ON
Full-time
A strong generalist engineer. You can ship full-stack TypeScript or Python on the backend, React on the frontend, SQL fluently, comfortable in someone else’s codebase within a day. You do…
Added 3 days ago
Senior Specialist, Market Model
Deloitte
Toronto, ON
Full-time
…with MS&I colleagues, providing reliable market evidence and analysis that supports data-driven discovery, market outlooks and strategic growth…
Added 3 days ago
Business Analytics Specialist
Aviso
Vancouver, BC
$83,000 to $100,000 CAD / year
Full-time
We're looking to fill an opening for a Business Analytics Specialist to join our Data Science and AI Enablement team.
Added 3 days ago
Salesforce Automation Developer (Marketing Cloud)
Purolator
ON · Mississauga, ON
Utilize SQL for data manipulation, segmentation, and reporting to support campaign execution and analysis.
Added 4 days ago
Salesforce Automation Developer (Marketing Cloud)
Purolator Inc.
Mississauga, ON
Volunteer
Utilize SQL for data manipulation, segmentation, and reporting to support campaign execution and analysis.
Added 4 days ago
Business Analytics Specialist
Aviso
Toronto, ON
$83,000 to $100,000 CAD / year
Full-time
We're looking to fill an opening for a Business Analytics Specialist to join our Data Science and AI Enablement team.
Added 4 days ago
Analytics & Process Improvement Specialist - Challenger (Cambridge)
Fastfrate Group
Cambridge, ON
Acting as a critical conduit between technical data environments and business stakeholders, the individual will place a high emphasis on data science practices as it relates to improvements…
Added 4 days ago
AI Quality and Evaluation Lead
First National Financial LP
Toronto, ON · East York, ON
Full-time
Strong analytical and technical skills with Python, SQL, test automation, data analysis, statistical methods, and evaluation tooling such as MLflow, Ragas, DeepEval, or comparable…
Added 4 days ago
AI Data and Integration Engineer
First National Financial LP
Toronto, ON · East York, ON
Full-time
Hold end to end integration accountability for AI use cases across Merlin, SQL Server sources, document repositories, enterprise services, and event backbones, so that integration delivery…
Added 4 days ago
AI Engineer
First National Financial LP
Toronto, ON · East York, ON
Full-time
Build on shared AI Factory services and approved patterns across Databricks and Azure, including governed data, Vector Search, model and prompt registries, evaluation harnesses, APIs,…
Added 5 days ago
Senior BSA / Data Migration Specialist
Capgemini
Toronto, ON
Perform data analysis and profiling using SQL and related tools.
Added 5 days ago
Senior BSA / Data Migration Specialist (Salesforce)
UST
Montreal, QC
Full-time
Perform data analysis and profiling using SQL and related tools
Added 6 days ago
GIS and Data Specialist
Tata Consultancy Services
Toronto, ON
$100,000 to $120,000 CAD / year
Full-time
Experience working with the Safe FME data transformation tool is a requirement.• Knowledge of Databases and SQL language.
Added 8 days ago
Health Physicists
Ontario Power Generation
Bowmanville, ON
Full-time
Interpret regulations and policies and provide technical assistance and health physics expertise to operations groups, supporting compliance with radiation protection requirements.
Added 9 days ago
Security Assurance and Compliance Specialist
Equisoft
Montreal, QC · Quebec, QC · HYBRID - Montreal, Canada
Full-time
Identity Governance: Own the quarterly access review (OIPA, Design, SQL, Azure, bastion) - data collection, reviewer follow-up, revocations, closure evidence. Drive access-review automation…
Added 8 days ago
Specialist Software Cloud Developer
CPKC
Calgary, AB
Full-time
The Cloud Team delivers cloud-based solutions across CPKC, providing expertise in AWS and Azure to support real‑time data processing, on‑premises integrations, custom web applications, AI,…
Added 8 days ago
Security Assurance and Compliance Specialist
Equisoft
Montreal, QC
Full-time
Identity Governance: Own the quarterly access review (OIPA, Design, SQL, Azure, bastion) - data collection, reviewer follow-up, revocations, closure evidence. Drive access-review automation…
Added 8 days ago
Security Assurance and Compliance Specialist
Equisoft
Quebec, QC
Full-time
Identity Governance: Own the quarterly access review (OIPA, Design, SQL, Azure, bastion) - data collection, reviewer follow-up, revocations, closure evidence. Drive access-review automation…
Added 9 days ago
EAM – Tech Strategy Metrics & KPI Lead (Hyrbid)
Morgan Stanley
Montreal, QC
Full-time
the future of our communities. This is a Lead Data & Analytics Engineering position at Vice President level, which is part of the job family responsible for providing specialist data…

Equisoft

Security Assurance and Compliance Specialist

Quebec, QC, Canada

Job type: Full-time
Apply by: Oct 18, 2026
Posting language: English
Posted: Sep 18, 2026

Apply About employer

Applications open in a new tab.

Original job description

HYBRID - Québec City, Canada

What is Equisoft? Equisoft is a global provider of digital solutions for insurance and investment, recognized by over 250 of the world's leading financial institutions. We offer a comprehensive ecosystem of scalable solutions that help our customers meet all the challenges brought about by this era of digital transformation, thanks to our business needs-driven approach, industry knowledge, cutting-edge technologies and experts. With its business-driven approach, in-depth industry knowledge, cutting-edge technologies and multicultural team of experts based in North America, the Caribbean, Latin America, Europe, Africa, Asia and Australia, Equisoft helps its customers meet the challenges of this era of digital transformation.

Why Choose Equisoft? With 950+ Employees, We Are a Stable Organization That Offers Career Advancement Opportunities And Fosters a Stimulant Environment. If That’s Not Enough, Then Check Out These Other Perks Below

Hiring Location: Canada (Montreal)
You are working hybrid in a collaborative workspace
Full-time Permanent Role
Benefits available day 1: Medical, Dental, Retirement Plan, Telemedicine Program, Employee Assistance Program, etc.
Flexible hours
Number of hours per week: 40
Educational Support (LinkedIn Learning, LOMA Courses and Equisoft University)

Role: The Specialist, Security Assurance and Compliance reports to the Manager, Information Security and GRC. This role is the operating center of Equisoft’s security governance program. You’ll keep four certifications current (SOC 2 Type II, ISO 27001, ISO 22301, ISO 42001), answer the security questions standing between Equisoft and closed business, and drive recurring control activities - access reviews, patching, vulnerability remediation, pentest follow-up, and awareness training - to completion across teams you don’t manage. This is a coordination, evidence, and automation role, not an engineering one: you define what must happen, track whether it did, produce proof, and automate what shouldn’t require a person. Success is measured by audit outcomes, questionnaire turnaround time, and the percentage of control work running on schedule without escalation.

What You’ll Do

GRC: Support the control environment for SOC 2, ISO 27001, ISO 22301, and ISO 42001 - control mapping, evidence collection, auditor liaison. Manage policy lifecycle (review, versioning, publication, attestation). Prepare audit evidence packages and report gaps to closure.
Vendor & Third-Party Risk: Own the end-to-end DPIA process (Trust Center/SOC review, DPA/sub-processor analysis, SCC/residency checks, AI assessment, risk rating), vendor intake, the vendor risk register, and fourth-party tracking - chasing missing certs, bridge letters, and remediation commitments.
Client Security Assurance: Complete due diligence questionnaires and RFP security sections within SLA; maintain a response library. Coordinate client audit evidence requests. Issue SOC 2 reports and bridge letters. Serve as security point of contact for Sales, pre-sales, and Legal.
Identity Governance: Own the quarterly access review (OIPA, Design, SQL, Azure, bastion) - data collection, reviewer follow-up, revocations, closure evidence. Drive access-review automation with the managed services partner.
Vulnerability & Pentest Management: Track findings (Tenable, UpGuard, SentinelOne, external ASM), categorize by product/owner, drive remediation tickets and trend reporting. Coordinate the annual pentest (scoping, scheduling, provisioning) and drive findings to closure.
Patch & Configuration Hygiene: Generate monthly patching tickets, confirm completion with infrastructure, and maintain the server software/middleware inventory.
Security Awareness: Run the monthly training cycle, produce completion reporting, escalate outstanding completions, and administer the annual training needs survey.
BCDR Support: Supply DR exercise/continuity evidence for client requests; support BIA cycles and tabletop exercises.
Reporting & Automation: Produce recurring KPI/leadership reporting. Identify manual control work suitable for automation (asset inventory, ticket creation, evidence extraction, training reporting) and build/commission agentic workflows, with SOPs for each.

Requirements

Technical

5+ years in InfoSec GRC or IT audit in software/regulated services
Hands-on ownership of at least one full SOC 2 Type II or ISO 27001 cycle
Experience with B2B client security questionnaires/due diligence
Working knowledge of GDPR, Quebec Law 25, and PIPEDA
Practical familiarity with vulnerability management/endpoint tooling (Tenable, SentinelOne preferred)

Soft Skills

Fluent in French and English (due to recurrent contact with international teams and customer)
Proven ability to drive completion through teams you don’t manage; comfortable escalating slipped commitments
Clear, client/auditor-ready writing; strong prioritization under high inbound demand; meticulous attention to detail

Nice To Have

CISA, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor
ISO 42001 or AI management system exposure
Insurance/wealth management industry experience
Agentic/Power Automate automation experience
Experience managing an MSSP

Equisoft is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Apply About employer

More about this job

Responsibilities

The specialist manages the security governance program by maintaining certifications, overseeing control activities, and ensuring compliance across various teams. They are responsible for vendor risk assessments, client security due diligence, and driving automation for manual security processes.

Requirements

Candidates must have 5+ years of experience in InfoSec GRC or IT audit within software or regulated services. Proficiency in English and French is required, along with practical knowledge of vulnerability management tools and regulatory frameworks like GDPR and Law 25.

Skills

SOC 2 Type II
ISO 27001
ISO 22301
ISO 42001
Information security
GRC
Vulnerability management
Audit compliance
Risk assessment
GDPR
Quebec Law 25
PIPEDA
Tenable
SentinelOne
Identity governance
Vendor risk management

Benefits

Medical
Dental
Retirement plan
Telemedicine program
Employee assistance program
Educational support
Flexible hours

Visa sponsorship

Not detected in the job text

Keywords

SOC 2 Type II
ISO 27001
ISO 22301
ISO 42001
GRC
Information Security
Vulnerability Management
GDPR
Quebec Law 25
PIPEDA
Tenable
SentinelOne
UpGuard
Identity Governance
DPIA
Vendor Risk Management
BCDR
Audit
Compliance
Automation
Power Automate
CISA
CISSP
CRISC
Risk Assessment
Security Awareness
Software
Insurance
Wealth Management
MSSP

Report this job