Senior Cloud Services Compliance Officer

Location: Ottawa, ON (500 Palladium Drive)

Work Model: Hybrid — 3 days per week in office

Hours: Monday–Friday, 9:00 AM–5:00 PM

Pay Rate: $50.00–$53.00 per hour

Position Summary

We are seeking a Senior Cloud Services Compliance Officer to lead cybersecurity compliance initiatives across Cloud Services. This role is responsible for managing complex audit activities, customer security and compliance assessments, regulatory obligations, and internal security and privacy programs.

The successful candidate will work closely with senior business leaders, technical teams, auditors, customers, and external stakeholders to strengthen compliance practices, mitigate risk, and ensure alignment with internal policies, industry standards, and regulatory requirements across multiple jurisdictions.

Key Responsibilities

Cybersecurity Compliance Programs

- Serve as the primary point of contact for compliance and audit activities within assigned Cloud Services.
- Build trusted partnerships with Cloud Services teams and provide practical compliance guidance.
- Lead interactions with internal auditors, third-party auditors, and external regulatory bodies.
- Support the development, implementation, and maintenance of compliance programs aligned with organizational strategy and regional regulatory requirements.

Audit Strategy and Execution

- Lead the preparation, coordination, and execution of internal and external audits.
- Develop proactive, risk-based audit strategies aligned with business priorities and continuous-improvement objectives.
- Ensure Cloud Services adhere to corporate policies, security standards,



industry frameworks, and regulatory requirements.
- Track audit findings, remediation actions, and corrective action plans through completion.

Risk Management and Controls

- Enhance risk management practices and internal controls across assigned Cloud Services.
- Support and improve controls relating to Change Management, Business Continuity Planning (BCP), and Disaster Recovery (DR).
- Maintain governance, risk, and compliance documentation, including required ISMS, ISO 27001, ISO 27017, and ISO 27018 materials.
- Identify control gaps and recommend remediation approaches that balance compliance, operational efficiency, and business needs.

Policy Development and Process Improvement

- Support the development, review, and implementation of cybersecurity compliance policies, standards, and procedures.
- Recommend and drive policy and control improvements to strengthen the Cloud Services compliance posture.
- Assess and refine compliance workflows to improve audit readiness, efficiency, risk mitigation, and alignment with evolving frameworks.

Global Compliance Management

- Partner with cross-functional teams to assess cybersecurity and privacy compliance requirements across jurisdictions.
- Support adherence to local and global regulations, including GDPR, CCPA,



and related data privacy obligations.
- Assist with global compliance strategies and help ensure cross-border data transfers align with corporate policies and applicable standards.

Business Advisory and Customer Support

- Provide compliance guidance to sales, presales, product management, and other business functions.
- Support responses to RFPs, RFIs, customer security questionnaires, and client compliance inquiries.
- Act as a senior advisor on complex security and compliance matters, including risk mitigation and regulatory adherence.
- Engage directly with key customers to address compliance and security questions and support trust-building initiatives.

Monitoring and Reporting

- Oversee ongoing monitoring of compliance programs to ensure continued effectiveness and alignment with security and business goals.
- Prepare and deliver regular reports to senior leadership on audit outcomes, risk areas, corrective actions, and compliance status.
- Communicate relevant audit requirements and results to customers, partners, and regulatory stakeholders as needed.

Minimum Qualifications

- 7+ years of experience in cybersecurity compliance, certifications, risk management, or information security, preferably within cloud services environments.
- Demonstrated experience independently leading internal and external audits, risk assessments, remediation activities, and corrective action plans.
- Robust practical knowledge of security and compliance standards, including:
- ISO 27001
- ISO 27017 and ISO 27018
- SOC 2
- FedRAMP
- CSA
-

📌 Senior Compliance Officer (Ottawa)
🏢 Kelly
📍 Ottawa