Senior Compliance Officer
- Ottawa, ON, Canada
- Kanata, ON, Canada
$50 to $53 USD / hour · Full-time
Applications open in a new tab.
Job details
- Pay
- $50 to $53 USD / hour
- Job type
- Full-time
- Apply by
- Experience
- 7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
- Posting language
- English
- Posted
Original job description
Location: Ottawa, ON (500 Palladium Drive)
Work Model: Hybrid - 3 days per week in office
Hours: Monday–Friday, 9:00 AM–5:00 PM
Pay Rate: $50.00–$53.00 per hour
Position Summary
We are seeking a Senior Cloud Services Compliance Officer to lead cybersecurity compliance initiatives across Cloud Services. This role is responsible for managing complex audit activities, customer security and compliance assessments, regulatory obligations, and internal security and privacy programs.
The successful candidate will work closely with senior business leaders, technical teams, auditors, customers, and external stakeholders to strengthen compliance practices, mitigate risk, and ensure alignment with internal policies, industry standards, and regulatory requirements across multiple jurisdictions.
Key Responsibilities
Cybersecurity Compliance Programs
- Serve as the primary point of contact for compliance and audit activities within assigned Cloud Services.
- Build trusted partnerships with Cloud Services teams and provide practical compliance guidance.
- Lead interactions with internal auditors, third-party auditors, and external regulatory bodies.
- Support the development, implementation, and maintenance of compliance programs aligned with organizational strategy and regional regulatory requirements.
- Lead the preparation, coordination, and execution of internal and external audits.
- Develop proactive, risk-based audit strategies aligned with business priorities and continuous-improvement objectives.
- Ensure Cloud Services adhere to corporate policies, security standards, industry frameworks, and regulatory requirements.
- Track audit findings, remediation actions, and corrective action plans through completion.
- Enhance risk management practices and internal controls across assigned Cloud Services.
- Support and improve controls relating to Change Management, Business Continuity Planning (BCP), and Disaster Recovery (DR).
- Maintain governance, risk, and compliance documentation, including required ISMS, ISO 27001, ISO 27017, and ISO 27018 materials.
- Identify control gaps and recommend remediation approaches that balance compliance, operational efficiency, and business needs.
- Support the development, review, and implementation of cybersecurity compliance policies, standards, and procedures.
- Recommend and drive policy and control improvements to strengthen the Cloud Services compliance posture.
- Assess and refine compliance workflows to improve audit readiness, efficiency, risk mitigation, and alignment with evolving frameworks.
- Partner with cross-functional teams to assess cybersecurity and privacy compliance requirements across jurisdictions.
- Support adherence to local and global regulations, including GDPR, CCPA, and related data privacy obligations.
- Assist with global compliance strategies and help ensure cross-border data transfers align with corporate policies and applicable standards.
- Provide compliance guidance to sales, presales, product management, and other business functions.
- Support responses to RFPs, RFIs, customer security questionnaires, and client compliance inquiries.
- Act as a senior advisor on complex security and compliance matters, including risk mitigation and regulatory adherence.
- Engage directly with key customers to address compliance and security questions and support trust-building initiatives.
- Oversee ongoing monitoring of compliance programs to ensure continued effectiveness and alignment with security and business goals.
- Prepare and deliver regular reports to senior leadership on audit outcomes, risk areas, corrective actions, and compliance status.
- Communicate relevant audit requirements and results to customers, partners, and regulatory stakeholders as needed.
- 7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
- Demonstrated experience independently leading internal and external audits, risk assessments, remediation activities, and corrective action plans.
- Strong practical knowledge of security and compliance standards, including:
- ISO 27001
- ISO 27017 and ISO 27018
- SOC 2
- FedRAMP
- CSA
- PCI DSS
- Data privacy regulations, including GDPR
- Solid understanding of cloud environments and cloud security fundamentals across AWS, Microsoft Azure, and/or Google Cloud Platform.
- Proven ability to communicate and collaborate effectively with business units, senior leadership, auditors, regulators, customers, and technical teams.
- 7–10 years of experience in cybersecurity compliance, information security, or risk management.
- Experience supporting cloud computing, SaaS, or enterprise technology environments.
- Professional certifications such as CISA, CISM, CRISC, or equivalent.
- Strong working knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, NIST, and related security and privacy frameworks.
- Experience leading complex audits in partnership with legal, privacy, operations, security, and technical teams.
- Excellent written, verbal, presentation, and stakeholder-management skills.
- Strategic mindset with the ability to connect compliance priorities to business objectives, risk reduction, and continuous improvement.
Get a complete career fit with Kelly®.
You’re looking to keep your career moving onward and upward, and we’re here to help you do just that. Our staffing experts connect you with top companies for opportunities where you can learn, grow, and thrive. Jobs that fit your skills and experience, and most importantly, fit right on your path of where you want to go in your career.
About Kelly
Work changes everything. And at Kelly, we’re obsessed with where it can take you. To us, it’s about more than simply accepting your next job opportunity. It’s the fuel that powers every next step of your life. It’s the ripple effect that changes and improves everything for your family, your community, and the world. Which is why, here at Kelly, we are dedicated to providing you with limitless opportunities to enrich your life-just ask the 300,000 people we employ each year.
Kelly is committed to providing a workplace environment that is inclusive and respects the dignity of those in our workforce. Consistent with that commitment, Kelly will ensure that persons who are otherwise able to work are not unfairly excluded from doing so based upon any grounds protected by applicable human rights legislation, and will make all reasonable efforts to accommodate the needs of applicants and employees in all employment processes including but not limited to, hiring, advancement, discharge, compensation, or training.
Kelly may use AI-powered tools during the recruitment and hiring process. For full details, including how Kelly uses AI, your rights, and how to request a reasonable accommodation, visit the Recruitment Artificial Intelligence Notice.
More about this job
Responsibilities
Lead cybersecurity compliance programs and internal and external audits for Cloud Services, including risk assessments, control improvements, remediation tracking, and regulatory alignment. Advise business teams and customers on compliance matters, support security assessments and questionnaires, and report audit outcomes and compliance status to senior leadership.
Requirements
Requires at least seven years of experience in cybersecurity compliance, information security, certifications, or risk management, preferably in cloud services, along with experience independently leading audits and remediation. Candidates should understand major security and privacy frameworks and cloud platforms such as AWS, Azure, or Google Cloud; certifications such as CISA, CISM, or CRISC are preferred.
Skills
- Cybersecurity Compliance
- Audit Management
- Risk Management
- Internal Controls
- Cloud Security
- ISO 27001
- ISO 27017
- ISO 27018
- SOC 2
- FedRAMP
- CSA
- PCI DSS
- GDPR
- CCPA
- NIST
- Stakeholder Management
Benefits
- Extended Healthcare
- Prescription Drug Coverage
- Professional and Medical Services
- Dental Insurance
- Life Insurance
- Emergency Travel Assistance
- Holiday Pay
- Vacation Pay
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
- Consulting
Keywords
- Cybersecurity Compliance
- Cloud Services
- Internal Audits
- External Audits
- Risk Assessments
- Remediation
- Corrective Action Plans
- ISO 27001
- ISO 27017
- ISO 27018
- SOC 2
- FedRAMP
- CSA
- PCI DSS
- GDPR
- CCPA
- NIST
- AWS
- Microsoft Azure
- Google Cloud Platform
- Information Security Management System
- Change Management
- Business Continuity Planning
- Disaster Recovery
- Cross-Border Data Transfers
- CISA
- CISM
- CRISC
- Governance, Risk, and Compliance