Analyste en sécurité des produits chez Alithya, intégrant la sécurité de l’information aux projets technologiques. Évaluation des risques, recommandations et suivi des mesures de sécurité.
About the role
- Cybersecurity Compliance Analyst supporting Ledcor’s diversified construction business. Managing control assessments, audits, vendor cyber risk, and regulatory compliance reporting.
Responsibilities
- Support execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs
- Assist in developing, documenting, and maintaining the IT Compliance Management Program and cybersecurity compliance framework
- Support implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards
- Perform control validation, evidence collection, and compliance assessments
- Develop and maintain compliance dashboards, metrics, and management reporting
- Coordinate internal and external ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
- Track audit findings, compliance gaps, remediation activities, and closure status
- Execute third-party risk management, including vendor onboarding, risk classification, security assessments, and remediation tracking
- Review vendor security questionnaires, SOC reports, and ISO certifications
- Maintain cybersecurity policies, standards, and compliance processes
- Work under the guidance of the Senior Specialist and support cross-functional stakeholders
Requirements
- Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
- Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
- Experience supporting IT audits, internal controls, and compliance certifications such as ISO 27001, PCI, and ITGC
- Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
- Bachelor’s degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
- Strong knowledge of NIST, ISO 27001, CIS Controls, and related cybersecurity best practices
- Experience contributing to cybersecurity policies, standards, and governance documentation
- Strong project management, analytical, and problem-solving skills
- Ability to work independently and manage multiple stakeholders
- Excellent communication, collaboration, and interpersonal skills
- Ability to build positive working relationships and support cross-functional teams
Benefits
- Competitive total rewards package
- Compensation and benefits supporting physical, mental, and financial wellbeing
- Opportunities to develop skills and knowledge
- Flexible remote work with office attendance as business needs require
- Equal-opportunity and inclusive workplace
- Adjustments provided throughout the hiring process
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Intermediate SOC Analyst monitoring and responding to security incidents for Long View, a North American IT provider. Managing SIEM tools, cloud environments, escalations, and 24x7 operations.
LP
Security Specialist – IT Audit
LinkedIn Recruiter Post
Security Specialist - IT Audit needed for a banking client. 6 - month contract, hybrid in Toronto/Mississauga, requires 10+ years experience and CISA.
LP
Senior IT Security Specialist (GRC / IT Audit / Remediation Validation)
LinkedIn Recruiter Post
Senior IT Security Specialist (GRC/IT Audit) needed for hybrid role in Toronto/Mississauga. 10+ years experience, CISA required.
Security Analyst triaging bug bounty vulnerabilities for Stripe’s financial infrastructure platform. Driving researcher engagement, remediation coordination, vulnerability analysis, and bug bounty program improvements.
Azure AD Security Analyst leading identity and access management for Intact, a Canadian insurer. Integrating Azure AD, supporting IAM architecture, automation, privileged access, and major incidents.
Analyste sécurité informatique chez Beneva, compagnie d’assurance et de services financiers. Intégration des contrôles IAM, analyse des exigences de sécurité et accompagnement des équipes applicatives.
Security Analyst leading Cyber Threat Exposure Management transformation for iA Financial Group, a Canadian insurance and wealth - management provider. Coordinating risk reduction, governance, and cross - functional CTEM initiatives.
Senior Security Risk Analyst at Twilio enhancing security risk management and collaborating with cross - functional teams. Focused on identifying and mitigating cyber risks effectively and ensuring compliance.
Experienced Workday Reporting, Security & HRIS Analyst supporting HR, Payroll, IT, Finance teams with Workday solutions. Involves configuration, reporting, and collaboration with various business units.