Support execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs

Assist in developing, documenting, and maintaining the IT Compliance Management Program and cybersecurity compliance framework

Support implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards

Perform control validation, evidence collection, and compliance assessments

Develop and maintain compliance dashboards, metrics, and management reporting

Coordinate internal and external ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits

Track audit findings, compliance gaps, remediation activities, and closure status

Execute third-party risk management, including vendor onboarding, risk classification, security assessments, and remediation tracking

Review vendor security questionnaires, SOC reports, and ISO certifications

Maintain cybersecurity policies, standards, and compliance processes

Work under the guidance of the Senior Specialist and support cross-functional stakeholders

Requirements

Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance

Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives

Experience supporting IT audits, internal controls, and compliance certifications such as ISO 27001, PCI, and ITGC

Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking

Bachelor’s degree in Business, Computer Science, Information Systems, or a related field,



with IT audit or compliance experience

Strong knowledge of NIST, ISO 27001, CIS Controls, and related cybersecurity best practices

Experience contributing to cybersecurity policies, standards, and governance documentation

Robust project management, analytical, and problem-solving skills

Ability to work independently and manage multiple stakeholders

Excellent communication, collaboration, and interpersonal skills

Ability to build positive working relationships and support cross-functional teams

Core Competencies Demonstrates expertise in Cybersecurity Governance, Risk, and Compliance (GRC) with a strong focus on IT Compliance Management and Third-Party Risk Management. Proficient in managing compliance frameworks, conducting audits, and developing cybersecurity policies aligned with industry standards.

Highest-signal resume keywords

Cybersecurity Governance, Risk, And Compliance (GRC)

ISO 27001 Compliance

Third-Party Risk Management

IT Audits And Internal Controls

Project Management

ATS Optimization Keywords Hard Skills

Cybersecurity Compliance Framework

Control Validation

Compliance Assessments

Compliance Dashboards

Risk Classification

Security Assessments

Evidence Collection

Remediation Tracking

NIST Standards

CIS Controls

Soft Skills

Analytical Skills

Problem-Solving Skills

Communication Skills

Collaboration Skills

Interpersonal Skills

Certifications & Qualifications

ISO 27001

PCI Compliance

ITGC

Industry Keywords

Cyber Security Compliance

Third-Party Risk Management

IT Compliance Management

Audit Findings

Compliance Gaps

#J-18808-Ljbffr

📌 Cyber Security Compliance Analyst (Winnipeg)
🏢 Jobtailor
📍 Winnipeg