Position Summary

The Senior Cloud Services Compliance Officer is responsible for leading and overseeing compliance initiatives for Cloud Services for a cloud services domain level, with a focus on managing complex audit processes, customer security and compliance assessments, regulatory compliance, and internal security and privacy programs. This individual will collaborate with senior management of a business units, and external stakeholders to ensure compliance with internal policies, industry standards, and regulatory requirements across multiple jurisdictions. The Sr. Compliance Manager will also play a critical role in supporting strategic direction for compliance practices, driving continuous improvement, and ensuring robust risk mitigation in Cloud Services operations.

Essential Functions / Key Areas of Responsibility

Key Responsibilities:

1. Cybersecurity Compliance Programs:

Serve as the point of contact for managing all compliance and audit activities related to assigned Cloud Services, acting as a trusted partner to the assigned Cloud Services.
Lead interactions with both internal and external auditors (including external regulatory bodies, internal auditors, and third-party auditors), ensuring efficient and effective audit processes.
Support the development, implementation, and maintenance of compliance programs to meet the organization's strategic objectives and regional regulatory requirements.

2. Audit Strategy and Execution:

Lead the preparation and execution of internal and external audits across assigned Cloud Service, ensuring compliance with established corporate policies/standards, industry standards, and regulatory requirements.
Develop and implement audit strategies for the assigned Cloud Services, ensure audits are proactive, risk-based, and aligned with business priorities, while ensuring a continuous improvement approach.

3. Advanced Compliance and Risk Management:

Lead and enhance the risk management and improve controls for assigned Cloud Services, ensuring compliance with both internal policies and external regulatory requirements.
Support and improve the Cloud Services Change Management, Business Continuity Plan (BCP), and Disaster Recovery (DR) related controls to ensure compliance with corporation policies/standards and business continuity regulations and best practices.
Maintain and update key governance, risk management and compliance documentation, including ISMS 27001, ISO 27017/18 mandatory documents, ensuring alignment with corporate policy and evolving industry standards.

4. Policy Development and Process Improvement:

Support the develop, review, and implement cybersecurity compliance policies, standards and procedures to ensure continuous improvement of internal controls, audit readiness, and risk mitigation.
Recommend and drive the implementation of cybersecurity policies and standards aimed at improving Cloud Services’ compliance posture, ensuring policies are aligned with business objectives and regulatory expectations.
Regularly assess and refine compliance workflows to optimize efficiency and alignment with evolving compliance frameworks.

5. Global Compliance Management:

Partner with cross-functional teams in analyzing cybersecurity compliance requirements cross functions, ensuring adherence to local and international regulations (e.g., GDPR, CCPA, etc.).
Support the development of global compliance strategies, ensuring supported Cloud Services units are aware of evolving global cybersecurity and privacy laws and that cross-border data transfers are compliant with corporate policies and standards.

6. Support and Advisory for Cloud Services Units:

Provide cybersecurity compliance guidance and support to sales, presales, product management, and other business units on cybersecurity compliance-related matters, including RFPs, RFIs, security & compliance questionnaires, and client security inquiries.
Be the primary advisor to assigned Cloud Services on complex compliance and security topics, providing recommendations for risk mitigation, process improvements, and regulatory adherence.

7. Customer and Stakeholder Engagement:

Engage directly with key customers to address complex compliance and security questions, and to support ongoing trust-building initiatives.
Ensure the communication of compliance requirements and audit results to relevant stakeholders, including customers, partners, and regulators.

8. Continuous Monitoring and Reporting:

Oversee the ongoing monitoring of compliance programs to ensure that they remain effective and aligned with the organization’s security goals and business objectives.
Develop and provide regular compliance reports to senior management, highlighting audit results, risk areas, and the status of corrective actions.

Minimum Requirements:

• 7+ years of experience in cybersecurity compliance and certifications, preferably within cloud services environments.

• Proven experience independently leading and conducting internal and external audits, including risk assessments and remediation activities.

• Strong knowledge and experience working with industry-leading information security standards, such as: ISO 27001, ISO 27017/27018, SOC2, FedRAMP, CSA, PCI-DSS and Data Privacy Regulations (e.g. GDPR)

• Solid understanding of cloud environments (e.g., AWS, Azure, GCP) and cloud security fundamentals.

• Demonstrated ability to effectively communicate and collaborate with a broad range of internal and external stakeholders, including business units, senior leadership, auditors, and regulators.

Preferred Qualifications

• Experience: 7-10 years of experience in cybersecurity compliance, risk management, or information security. Experience in cloud computing or SaaS environments is highly preferred.

• Certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar certifications are strongly preferred.

• Expertise in Standards & Frameworks: Strong knowledge and practical experience with ISO 27001, SOC 2, PCI DSS, and other relevant frameworks (e.g., GDPR, NIST).

• Leadership Skills: Proven experience in leading complex audits, with the ability to work closely with senior leadership, legal, data privacy, operations, and technical teams.

• Communication Skills: Excellent written and verbal communication skills, with the ability to present complex compliance and audit findings to both technical and non-technical stakeholders.

• Strategic Thinking: Ability to take a strategic approach to compliance management, with a focus on risk mitigation, continuous improvement, and aligning compliance initiatives with business goals.

Additional Information

Location: Hybrid (Ottawa-500 Palladium) – 3 days per week in the office.
Work Schedule: 40 hours per week - Core hours: 9:00 a.m. – 5:00 p.m. EST
Compensation: $50 - $53

KellyOCG

New Jobs

Senior Compliance Officer