Auditor, IT Risk and Compliance

🔥 1 minute ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Canadian Bank Note Company, Limited

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Originally established in 1897 to supply security printed products to the Government of Canada, Canadian Bank Note Company, Limited (CBN) continues to provide goods and services in Canada including: currency; passports and ePassports; driver license and identification cards; biometric solutions; postage stamps; permanent resident cards; visas; and vital statistics documents.

📋 Description

• Develop, deliver and manage compliance and risk programs and activities • Conduct Audits and perform comprehensive internal audits aligned with recognized frameworks (ISO/IEC 27001, ISO 14298, PCI DSS, SOC 2, CIS Controls etc.) • Prepare detailed reports on audit findings, update registers, and highlight areas of concern • Present findings to senior management and compliance committees • Ensure IT systems and procedures comply with industry standards and regulations such as ISO-27001, PCI, and SOC 2 • Create internal policies and procedures to meet emerging or evolving standards • Participate in the maintenance of ongoing risk management program following CBN standard procedures • Identify and evaluate risks collaborating with stakeholders and SMEs • Document identified risks and communicate them to relevant stakeholders • Provide subject-matter guidance to business and technology teams • Oversee the implementation of corrective actions to ensure compliance issues are resolved effectively • Continuously seek ways to improve processes and methodologies

🎯 Requirements

• Bachelor’s degree in Information Systems (or similar) or equivalent combination of relevant education and additional relevant work experience • Certification and/or demonstrable knowledge/experience in compliance frameworks including ISO 27001:2022 and PCI-DSS v4.0+ • Working knowledge of industry recognized threat and risk management methodologies and frameworks • Comprehensive knowledge of Unified Compliance Frameworks and GRC tools • Thorough knowledge of current security trends, threat vectors and cyber security threats • 3+ years of experience in a relevant auditing, compliance and/or risk role • Experience in cybersecurity, corporate security, or highly regulated organization • Experience in developing and delivering compliance and risk assessments, creating, and presenting reports to management and liaising with external auditors • Legally eligible to work in Canada • Fluent in English (speak, read, write) • Able to obtain (in a timely manner) and maintain Government of Canada Secret (Level II) security clearance • Able to travel 2-6 weeks/year

🏖️ Benefits

• health, medical and life insurance benefits • defined contribution pension plan with company matching