Cyber Security Compliance Analyst

Essential Responsibilities:

• Assist in the development, documentation, and maintenance of the IT Compliance Management Program and cybersecurity compliance framework
• Support the implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards (e.g., ISO 27001, SOC 2, NIST)
• Perform control validation, evidence collection, and compliance assessments to support internal reviews, certifications, and regulatory attestations
• Develop and maintain compliance dashboards, metrics, and reporting for management, risk owners, and executive stakeholders
• Coordinate internal and external audit activities, including ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
• Track audit findings, compliance gaps, remediation activities, and closure status, ensuring timely follow-up with stakeholders
• Execute the third-party risk management program, including vendor onboarding, risk classification, security assessments, and remediation tracking
• Review vendor security documentation, including security questionnaires, SOC reports, and ISO certifications, to assess compliance risks
• Maintain cybersecurity policies, standards, and compliance processes to ensure alignment with evolving regulatory requirements, organizational policies, and industry best practices

Qualifications:

• Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
• Experience supporting IT audits, internal controls, and compliance certifications (e.g., ISO 27001, PCI, ITGC)
• Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
• Bachelor's degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, CIS Controls, and related best practices
• Experience contributing to the development and maintenance of cybersecurity policies, standards, and governance documentation
• Strong project management, analytical, and problem-solving skills, with the ability to work independently and manage multiple stakeholders
• Excellent communication, collaboration, and interpersonal skills, with a proven ability to build positive working relationships and support cross-functional teams

Working Conditions:

• Remote position with the flexibility of attending the office as business needs require

Additional Information

Our workplace culture has been recognized as one of Canada’s Best Diversity Employers, Canada’s Most Admired Corporate Cultures, and a Top 100 Inspiring Workplace in North America.

Our competitive total rewards package provides compensation and benefits that support your physical, mental and financial wellbeing. We offer exciting, challenging work with opportunities to develop your skills and knowledge.

Employment Equity

At Ledcor we believe diversity, equity, and inclusion should be part of everything we do. We are proud to be an equal-opportunity employer. All qualified individuals, regardless of race, color, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, Veteran status or any other identifying characteristic are encouraged to apply.

Our True Blue team consists of individuals from all backgrounds who contribute diverse perspectives and experiences to Ledcor. We are committed to continuing to build on our culture of empowerment, inclusion and belonging.  

Adjustments will be provided in all parts of our hiring process. Applicants need to make their needs known in advance by submitting a request via email. For more information about Ledcor’s Inclusion and Diversity initiatives, please visit our I&D page.