We are looking for a Dev

SecOps Engineer to lead and strengthen an experienced compliance and security assurance program in Ottawa, Ontario.

This Long-term Contract role is centred on expanding an established SOC 2 Type 2 framework beyond core security controls to include confidentiality and availability requirements, while maintaining a strong audit posture.

The successful candidate will work closely with stakeholders to build practical controls, maintain continuous evidence collection, and support a resilient, well-governed cloud security setting.

Responsibilities: Lead the ongoing management and enhancement of the SOC 2 Type 2 program, with emphasis on broadening coverage to include Confidentiality and Availability Trust Services Criteria.

Develop, implement, and refine controls related to data classification, secure handling of sensitive information, encryption standards, and role-based access practices.

Establish and maintain operational controls that support service availability, including backup validation,



disaster recovery readiness, capacity planning, and uptime oversight.

Configure and maintain compliance evidence workflows within Vanta to ensure documentation remains current, accurate, and ready for audit review at all times.

Act as the primary point of contact for external auditors, coordinate audit activities, and address control or evidence questions to minimize audit findings.

Partner with technical and business teams to align cloud security practices, configuration management, and cyber security controls with compliance objectives.

Assess firewall and network security environments, including technologies such as Check Point and Cisco ASA, to support secure infrastructure operations.

Investigate security and operational issues, troubleshoot control gaps, and recommend corrective actions that improve compliance effectiveness and system resilience.

📌 DevSecOps Engineer (Ottawa)
🏢 Robert Half
📍 Ottawa