Compliance and Risk Specialist

Internal Job Title:
Compliance and Risk Specialist

Job Type:
Permanent, Full-Time
Job Location: Canada
Work Model: Remote

Job Status:
Existing Vacancy

Position Summary

As a Compliance and Risk Specialist at CBN, you will support the Compliance and Risk team in leading and supporting compliance initiatives, conducting risk assessments and remediation activities, and contributing to the development of security strategies for systems deployed in Canada, the United States, and Europe. This role focuses on determining and assessing compliance direction, coordinating and tracking compliance-related tasks to completion, and ensuring effective collaboration across teams.

Responsibilities

• Compliance Initiatives
  • Manage and track compliance activities around global systems including components of the ISO, SOC 2, and PCI compliance and other jurisdictional compliance regulations.
  • Examine products and engage stakeholders and customers to establish a strategy for handling compliance-at-scale for both compliance-focused and cost-sensitive markets.
  • Prepare documentation and evidence for audits and compliance assessments.
• Security Strategy
  • Manage and coordinate the execution of security strategies and assessments, ensuring all related tasks and deliverables are completed on time and aligned with Canada/US and global security requirements.
  • Support initiatives to identify, investigate, and improve security risks within CBN Operations Global Infrastructure.
  • Enhance CBN’s App Sec pipeline to address risk assessments in an automated fashion at scale based on developed strategies.
• Risk Assessment and Remediation
  • Conduct Risk Assessments within customer systems to quickly assess associated risks, recommend actions, and develop plans for remediation.
  • Understand the risk/compliance gaps in our global systems, articulate a vision, and work across teams to get us there.
• Stakeholder Engagement
  • Report on compliance project status and work with teams to promptly address delays or issues.
  • Take an active role in educating customers, executives, stakeholders, infrastructure personnel, and developers on best practices for security.
  • Build relationships with stakeholders across groups to understand assessment needs, advise on how it should be handled, and the associated notification process.
• Various other Duties and Responsibilities.

Education and Knowledge

• Education
  • Bachelor’s degree in Computer Science, Information Technology or related field or an equivalent combination of relevant education and additional work experience
• Certification(s)
  • One (or more) of NIST
    800-53, ISO
    27001, SOC2, PCI, Fed Ramp, State Ramp
  • SANA, ISACA or GIAC is an asset
• Knowledge of the following:
  • Compliance standards, frameworks and tools
  • Threat and risk management principles and methodologies
  • Risk assessment practices and methodologies

Experience

• 8+ years experience in compliance or IT risk management
• Experience using structured approaches to risk assessment (e.g. HTRA, TRA, ITSG-33, CSF, FSIR, STAR)
• Strong organizational skills and familiarity with Agile project methodologies.
• Experience using Unified Compliance Frameworks and GRC tools is an asset
• Experience with Azure/AWS compliance is an asset

Technical Skills

• Proficiency with M365
• Presentation skills

Soft Skills and Competencies

• Critical thinking skills
  • Analysis, problem solving
• Excellent Interpersonal skills
  • Communication, relationship building, teamwork and collaboration
• Organization/time management/prioritization skills
• Attention to detail
• Adaptable
• Growth mindset

Mandatory Requirements

• Language(s): Fluency in English (reading, writing, speaking)
• Travel: Ability to travel domestically/internationally approx. 1-2 weeks/year
• Security Clearance: Ability to obtain and maintain Government of Canada Reliability Secret (Level II) clearance

Canadian Bank Note Company (CBN) is committed to fostering a diverse and inclusive workplace where all employees are treated with dignity and respect. We are proud to be an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other legally protected status.

We provide equal employment opportunities to all individuals, including women, Indigenous Peoples, persons with disabilities, visible minorities, and members of the 2

SLGBTQ+ community. Our commitment to equity extends to all aspects of employment, including recruitment, hiring, promotion, compensation, benefits, training, and development. As part of our commitment to providing an inclusive, barrier free selection process, we ask that if you are contacted regarding the competition for this position, you advise the interview coordinator or any accommodation measures you may require.

At CBN, we value the unique perspectives and experiences that each employee brings to our organization, and we are committed to maintaining a workplace that reflects the diverse communities we serve. We believe that…