Cyber Security Compliance Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Compliance Analyst based in Canada. This role offers the opportunity to support the ongoing evolution of cybersecurity governance, risk, and compliance programs within a large-scale organization. You will contribute to strengthening security controls, improving compliance maturity, and reducing cyber risks across business operations. Working alongside security, technology, and business stakeholders, you will help ensure alignment with industry standards and regulatory expectations. The position combines cybersecurity analysis, audit support, third-party risk management, and compliance reporting activities. You will gain exposure to leading security frameworks while contributing to meaningful initiatives that protect critical systems and information assets. This is an ideal opportunity for a developing cybersecurity professional who enjoys collaboration, problem-solving, and continuous improvement. \n Accountabilities: The Cyber Security Compliance Analyst will support the execution and enhancement of cybersecurity compliance initiatives, helping maintain strong governance practices and effective risk management processes. The role involves collaborating with internal teams, supporting audits, monitoring compliance activities, and contributing to the continuous improvement of security frameworks. Assist in developing, documenting, and maintaining cybersecurity compliance programs, policies, standards, and governance processes. Support compliance assessments, control validations, evidence collection, and internal reviews aligned with security frameworks and industry standards. Coordinate audit activities, including IT controls reviews, security certifications, and regulatory compliance assessments. Track audit findings, remediation plans, compliance gaps, and corrective actions to ensure timely resolution. Support third-party risk management activities, including vendor assessments, security reviews, risk classification, and remediation tracking. Review vendor security documentation such as questionnaires, certifications, and assessment reports to identify potential risks. Develop and maintain compliance dashboards, metrics, and reporting materials for stakeholders and leadership teams. Contribute to the improvement of cybersecurity processes by monitoring regulatory changes and industry best practices. Collaborate with cross-functional teams to ensure cybersecurity requirements are understood and effectively implemented. Requirements: The ideal candidate is a cybersecurity compliance professional with foundational experience in governance, risk, compliance, and IT audit activities. You should have strong analytical capabilities, attention to detail, and the ability to work with multiple stakeholders while supporting security improvement initiatives. Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC), IT compliance, or a related cybersecurity discipline. Experience supporting cybersecurity compliance programs, control frameworks, and governance initiatives. Familiarity with IT audits, internal controls, and security certifications such as ISO 27001, SOC 2, PCI, or ITGC. Experience supporting third-party/vendor risk management activities, including security assessments and remediation follow-up. Bachelor’s degree in Business, Computer Science, Information Systems, or a related field, combined with relevant compliance or audit experience. Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, CIS Controls, and related security practices. Experience contributing to cybersecurity policies, standards, procedures, and governance documentation. Strong project management, analytical thinking, and problem-solving skills. Ability to manage multiple priorities independently while collaborating effectively with diverse teams. Excellent written and verbal communication skills with strong stakeholder engagement abilities. Benefits: Competitive annual salary range of approximately $64,800 to $89,100 CAD, based on experience, skills, education, and location. Remote work flexibility with the ability to attend an office when business needs require. Comprehensive total rewards package supporting physical, mental, and financial wellbeing. Opportunities to develop cybersecurity expertise and expand knowledge across governance, risk, and compliance domains. Exposure to challenging projects and continuous learning opportunities within a collaborative technology environment. Inclusive workplace culture focused on diversity, equity, belonging, and professional growth. \n How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1

The analyst will support the execution and enhancement of cybersecurity compliance initiatives, including governance, risk management, and audit support. They will also collaborate with cross-functional teams to monitor regulatory changes and maintain effective security controls.

Candidates must have at least 2 years of experience in cybersecurity GRC or IT audit, along with a bachelor's degree in a relevant field. Strong knowledge of security frameworks like NIST and ISO 27001, combined with excellent analytical and communication skills, is required.

• Competitive annual salary • Remote work flexibility • Comprehensive total rewards package • Professional development opportunities • Inclusive workplace culture

• Problem solvingPreferred

Identified from the job description. Confirm important requirements above.

• Cybersecurity governance
• Risk management
• Compliance
• IT audit
• Third-party risk management
• Control frameworks
• ISO 27001
• SOC 2
• PCI
• ITGC
• NIST
• CIS Controls
• Policy development
• Analytical thinking
• Problem-solving
• Stakeholder engagement
• Compliance Reporting
• Cyber Governance
• Continuous Development
• IT Security Documentation
• Workplace Inclusivity
• Industry Standards
• General Data Protection Regulation (GDPR)
• Business Operations
• Analytical Thinking
• Cyber Security Policies
• Third Party Risk Management
• Data Privacy
• Evidence Collection
• Cybersecurity Compliance
• Compliance Assessments
• Artificial Intelligence
• Auditing
• Internal Controls
• Dashboard
• Regulatory Compliance
• Computer Science
• Information Systems
• Continuous Improvement Process
• Security Controls
• Cyber Security
• Information Privacy
• Governance
• Governance Risk Management And Compliance
• Leadership
• ISO/IEC 27001
• Problem Solving
• IT General Controls (ITGC)
• Risk Management
• Project Management

• Security & Safety
• Technology
• Software
• Consulting
• Security Compliance Analyst
• Cyber Security Analyst
• Database and Network Professionals Not Elsewhere Classified
• Information Security Analysts

Minimum education

Bachelor’s degree

Minimum experience

2+ years

Posting language

English

Working hours

40 hours per week