Sr Advisor, Risk & Compliance

WestJet • Contract • Calgary, AB, CA • 2w ago

Employment Type: Full-time Regular

City: Calgary, AB (YYC)

Posting Open Date: 10/31/2025

Posting Close Date: 11/13/2025 (Please note the posting will close at 11:59pm MST)

Why WestJet:

Every WestJet journey has the potential to enrich lives; a career with us is no exception.

WestJet arrived on the Canadian airline scene in 1996 and changed the industry for the better. We made air travel more affordable for Canadians and now we're going global.

Join us, this is where your career story takes off.

Overview of role:

The Sr Advisor, Risk & Compliance is accountable to ensure that information security requirements are included when an IT or business initiative of large scope or high complexity is being conceptualized OR evaluated and continues to provide advisory support for the lifecycle of the initiative ensuring all standards, policies and procedures pertaining to various Cybersecurity functions are adhered to.

Key deliverables / responsibilities include:

Works with unique expertise and knowledge in Information Security and uses skills to identify information security related risks and controls to achieve organizational goals in creative and effective ways
Provide information security requirements advice and counsel to project teams and the business ensuring alignment to policies, processes and standards.
Provide consultation to strategic sourcing, legal personnel and any other stakeholders in the negotiation of information security related contractual clauses with suppliers.
Monitor and track remediation of assessment findings.
Provide information security subject matter expertise on design and controls to business and suppliers during findings remediation
Raise information security exceptions and acceptances (as required) to ensure these are accurate and are supported by sound resolution plans.
Escalate potential or unresolved information security issues to management for resolution, as appropriate
Administer the risk register and ensure risk mitigations, plans and associated follow-up activities are performed by risk owners.
Review and provide recommendations to information security policies, standards, guidelines/ processes.
Work to develop / advise in the implementation and improvement of systems and processes to support continual improvement in compliance in the business.
Act as a subject matter expert in the application of laws and regulations, industry frameworks and standards related to IT Compliance.
Coordinates with internal and external auditors to facilitate meetings, provide evidence, consolidate procedures and ensure remediation is performed.
Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
Follow up on audit findings to ensure that management has taken corrective action(s).
Contribute to compliance training program development for new and current employees and provide additional specific information security & privacy training to departments or roles/projects as needed.
Analyze emerging industry standards and the latest/newest protocols to contribute to policies and governance development.
Collaborate with business process owners in the management and maintenance of data classification processes.
Produce metrics and analytics for management to gain insight for planning, design and to facilitate the identification of improvement opportunities.

Experience and qualifications:

Master’s Degree and 8+ years of Information Security experience preferred, or an equivalent combination of training and experience
A minimum of 1 Information security certification (e.g. CISSP, CRISC, CISM, CIPT, CEH, SANS) is required
In-depth knowledge of Information Security risk, ITGC Controls, supplier due diligence, etc. is required
Excellent knowledge of and demonstrated ability to apply common frameworks and models used for Information Security Risk and Compliance, such as ISO 27001, NIST CSF, COSO and CobiT
Excellent knowledge of regulations such as GDPR, PIPEDA, IATA IOSA and PCI DSS
Excellent knowledge of industry standards on Policies, Standards and guidelines relating to information security risk
Proficient knowledge and understanding of network security, application security, data security and cloud security domains is required
Requires excellent problem-solving skills and good interpersonal and communication skills including influencing others
Possess excellent consulting and analysis skills
Possess excellent project management and time management skills

The benefits of being a WestJetter:

WestJet provides all WestJetters with a competitive total rewards package. On top of that, we offer:

A fun and friendly culture with colleagues who work together to win
Travel privileges for you and your family, effective from your start date
Savings and Benefit programs that are flexible to meet your specific needs

Think we are a fit? Apply now!

About WestJet Group Of Companies

WestJet took to the skies in 1996 with just over 200 employees and three aircraft operating service to five destinations. Since then, WestJet has pioneered low-cost travel in Canada, cutting airfares in half, and increasing the flying population in Canada by more than 50 per cent. Following integration with Sunwing in 2025, more than 14,000 WestJetters support nearly 200 aircraft and connect guests to more than 100 destinations across North America, Central America, the Caribbean, Europe and Asia.

As a major Canadian employer that includes WestJet Airlines, Sunwing Vacations Group and WestJet Cargo, the WestJet Group is Canada’s leading low-cost airline and largest vacation provider, with a united purpose of providing affordable and accessible air and vacation travel to Canadians.

Our Safety Promise

At WestJet, the safety and security of our people and our guests is a core value and at the heart of what we do. As safety and security is a shared responsibility, it is expected that you will use safe work practices to ensure your well-being and the safety of others.

WestJet recognizes that the use of Alcohol and Drugs can adversely impact a safe work environment and the well-being of others including guests, suppliers and the public, as well as place WestJet's operations at risk. All roles that are identified as safety sensitive are required to pass a Pre-Employment Alcohol and Drug Test as per WestJet's Alcohol and Drug Policy. 

Our Commitment to Diversity and Inclusion

We embrace what makes us each unique, and what makes us uniquely WestJet. WestJet is committed to inclusiveness, equity, and accessibility and if you require accommodation during the selection process, please let our Talent Acquisition team know at talent@westjet.com. We encourage all qualified candidates to apply.

At WestJet, we welcome unique skills, experiences, and backgrounds - if you’re passionate and excited about this role, we encourage you to apply even if you do not meet every single qualification in the posting. We are committed to inclusivity, equity, and accessibility in the selection process. If you require an accommodation during the recruiting process, please let our Talent Acquisition team know.

We thank all applicants for their interest in WestJet; however, only those candidates who are selected will be contacted.

For more information about everything WestJet, please visit WestJet.com