Back to results

Senior Compliance Officer

  • Ottawa, ON, Canada
  • Kanata, ON, Canada

$50 to $53 USD / hour · Full-time

Applications open in a new tab.

Job details

Pay
$50 to $53 USD / hour
Job type
Full-time
Apply by
Experience
7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
Posting language
English
Posted

Original job description

Senior Cloud Services Compliance Officer

Location: Ottawa, ON (500 Palladium Drive)

Work Model: Hybrid - 3 days per week in office

Hours: Monday–Friday, 9:00 AM–5:00 PM

Pay Rate: $50.00–$53.00 per hour

Position Summary

We are seeking a Senior Cloud Services Compliance Officer to lead cybersecurity compliance initiatives across Cloud Services. This role is responsible for managing complex audit activities, customer security and compliance assessments, regulatory obligations, and internal security and privacy programs.

The successful candidate will work closely with senior business leaders, technical teams, auditors, customers, and external stakeholders to strengthen compliance practices, mitigate risk, and ensure alignment with internal policies, industry standards, and regulatory requirements across multiple jurisdictions.

Key Responsibilities

Cybersecurity Compliance Programs

  • Serve as the primary point of contact for compliance and audit activities within assigned Cloud Services.
  • Build trusted partnerships with Cloud Services teams and provide practical compliance guidance.
  • Lead interactions with internal auditors, third-party auditors, and external regulatory bodies.
  • Support the development, implementation, and maintenance of compliance programs aligned with organizational strategy and regional regulatory requirements.

Audit Strategy and Execution

  • Lead the preparation, coordination, and execution of internal and external audits.
  • Develop proactive, risk-based audit strategies aligned with business priorities and continuous-improvement objectives.
  • Ensure Cloud Services adhere to corporate policies, security standards, industry frameworks, and regulatory requirements.
  • Track audit findings, remediation actions, and corrective action plans through completion.

Risk Management and Controls

  • Enhance risk management practices and internal controls across assigned Cloud Services.
  • Support and improve controls relating to Change Management, Business Continuity Planning (BCP), and Disaster Recovery (DR).
  • Maintain governance, risk, and compliance documentation, including required ISMS, ISO 27001, ISO 27017, and ISO 27018 materials.
  • Identify control gaps and recommend remediation approaches that balance compliance, operational efficiency, and business needs.

Policy Development and Process Improvement

  • Support the development, review, and implementation of cybersecurity compliance policies, standards, and procedures.
  • Recommend and drive policy and control improvements to strengthen the Cloud Services compliance posture.
  • Assess and refine compliance workflows to improve audit readiness, efficiency, risk mitigation, and alignment with evolving frameworks.

Global Compliance Management

  • Partner with cross-functional teams to assess cybersecurity and privacy compliance requirements across jurisdictions.
  • Support adherence to local and global regulations, including GDPR, CCPA, and related data privacy obligations.
  • Assist with global compliance strategies and help ensure cross-border data transfers align with corporate policies and applicable standards.

Business Advisory and Customer Support

  • Provide compliance guidance to sales, presales, product management, and other business functions.
  • Support responses to RFPs, RFIs, customer security questionnaires, and client compliance inquiries.
  • Act as a senior advisor on complex security and compliance matters, including risk mitigation and regulatory adherence.
  • Engage directly with key customers to address compliance and security questions and support trust-building initiatives.

Monitoring and Reporting

  • Oversee ongoing monitoring of compliance programs to ensure continued effectiveness and alignment with security and business goals.
  • Prepare and deliver regular reports to senior leadership on audit outcomes, risk areas, corrective actions, and compliance status.
  • Communicate relevant audit requirements and results to customers, partners, and regulatory stakeholders as needed.

Minimum Qualifications

  • 7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
  • Demonstrated experience independently leading internal and external audits, risk assessments, remediation activities, and corrective action plans.
  • Strong practical knowledge of security and compliance standards, including:
    • ISO 27001
    • ISO 27017 and ISO 27018
    • SOC 2
    • FedRAMP
    • CSA
    • PCI DSS
    • Data privacy regulations, including GDPR
  • Solid understanding of cloud environments and cloud security fundamentals across AWS, Microsoft Azure, and/or Google Cloud Platform.
  • Proven ability to communicate and collaborate effectively with business units, senior leadership, auditors, regulators, customers, and technical teams.
Preferred Qualifications

  • 7–10 years of experience in cybersecurity compliance, information security, or risk management.
  • Experience supporting cloud computing, SaaS, or enterprise technology environments.
  • Professional certifications such as CISA, CISM, CRISC, or equivalent.
  • Strong working knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, NIST, and related security and privacy frameworks.
  • Experience leading complex audits in partnership with legal, privacy, operations, security, and technical teams.
  • Excellent written, verbal, presentation, and stakeholder-management skills.
  • Strategic mindset with the ability to connect compliance priorities to business objectives, risk reduction, and continuous improvement.

As part of our promise to talent, Kelly supports those who work with us through a variety of benefits, perks and work-related resources. Please note: The following benefits reflect Kelly's general offerings. Eligibility may vary by assignment, location and job type. Kelly offers eligible employees a group benefit program that includes extended healthcare (drug plan, professional and medical services), dental, life, and emergency travel assistance. In addition, employees are entitled to holiday and vacation pay in accordance with provincial labour law. Click here for more information on benefits and perks that may be available to you as a member of the Kelly Talent Community in Canada.

Get a complete career fit with Kelly®.

You’re looking to keep your career moving onward and upward, and we’re here to help you do just that. Our staffing experts connect you with top companies for opportunities where you can learn, grow, and thrive. Jobs that fit your skills and experience, and most importantly, fit right on your path of where you want to go in your career.

About Kelly

Work changes everything. And at Kelly, we’re obsessed with where it can take you. To us, it’s about more than simply accepting your next job opportunity. It’s the fuel that powers every next step of your life. It’s the ripple effect that changes and improves everything for your family, your community, and the world. Which is why, here at Kelly, we are dedicated to providing you with limitless opportunities to enrich your life-just ask the 300,000 people we employ each year.

Kelly is committed to providing a workplace environment that is inclusive and respects the dignity of those in our workforce. Consistent with that commitment, Kelly will ensure that persons who are otherwise able to work are not unfairly excluded from doing so based upon any grounds protected by applicable human rights legislation, and will make all reasonable efforts to accommodate the needs of applicants and employees in all employment processes including but not limited to, hiring, advancement, discharge, compensation, or training.

Kelly may use AI-powered tools during the recruitment and hiring process. For full details, including how Kelly uses AI, your rights, and how to request a reasonable accommodation, visit the Recruitment Artificial Intelligence Notice.
More about this job

Responsibilities

Lead cybersecurity compliance programs and internal and external audits for Cloud Services, including risk assessments, control improvements, remediation tracking, and regulatory alignment. Advise business teams and customers on compliance matters, support security assessments and questionnaires, and report audit outcomes and compliance status to senior leadership.

Requirements

Requires at least seven years of experience in cybersecurity compliance, information security, certifications, or risk management, preferably in cloud services, along with experience independently leading audits and remediation. Candidates should understand major security and privacy frameworks and cloud platforms such as AWS, Azure, or Google Cloud; certifications such as CISA, CISM, or CRISC are preferred.

Skills

  • Cybersecurity Compliance
  • Audit Management
  • Risk Management
  • Internal Controls
  • Cloud Security
  • ISO 27001
  • ISO 27017
  • ISO 27018
  • SOC 2
  • FedRAMP
  • CSA
  • PCI DSS
  • GDPR
  • CCPA
  • NIST
  • Stakeholder Management

Benefits

  • Extended Healthcare
  • Prescription Drug Coverage
  • Professional and Medical Services
  • Dental Insurance
  • Life Insurance
  • Emergency Travel Assistance
  • Holiday Pay
  • Vacation Pay

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Security & Safety
  • Management & Leadership
  • Consulting

Keywords

  • Cybersecurity Compliance
  • Cloud Services
  • Internal Audits
  • External Audits
  • Risk Assessments
  • Remediation
  • Corrective Action Plans
  • ISO 27001
  • ISO 27017
  • ISO 27018
  • SOC 2
  • FedRAMP
  • CSA
  • PCI DSS
  • GDPR
  • CCPA
  • NIST
  • AWS
  • Microsoft Azure
  • Google Cloud Platform
  • Information Security Management System
  • Change Management
  • Business Continuity Planning
  • Disaster Recovery
  • Cross-Border Data Transfers
  • CISA
  • CISM
  • CRISC
  • Governance, Risk, and Compliance

Report this job