Cyber Compliance & Customer Assurance Specialist

S&P Global Mobility • London, ON

5d

About The Position

The Cyber Compliance & Customer Assurance Specialist will support enterprise-wide cybersecurity compliance and customer assurance activities, including certification and audit readiness for frameworks such as SOX, ISO 27001, SOC 2, and TISAX. This role is responsible for executing compliance processes, coordinating audit evidence, responding to customer security questionnaires and audits, and supporting the broader Cyber Governance, Risk & Compliance program. The Cyber Governance, Risk & Compliance (GRC) team is responsible for managing cyber risk, driving policy adherence, enabling compliance, supporting customer trust initiatives, and delivering enterprise-wide governance processes. The team partners across IT, Security, Legal, Risk, Privacy, Sales, and Business functions to deliver integrated risk management and assurance capabilities.

Requirements

• 4-6 years working experience in one or more areas of cybersecurity compliance, controls testing, audit, or customer assurance.
• Working knowledge of cybersecurity compliance and control frameworks (SOX, ISO 27001, NIST, TISAX, SOC 2).
• Experience supporting compliance audits, control testing, or certification readiness activities.
• Experience responding to customer security questionnaires, due diligence requests, or customer-led audits.
• Experience developing and maintaining metrics, dashboards, reports, and documentation for compliance and assurance programs.
• Strong written and verbal communication skills with the ability to translate technical concepts into business-focused communications.
• Ability to collaborate effectively with cross-functional teams and manage multiple priorities in a fast-paced environment.
• Strong analytical, organizational, and problem-solving skills with attention to detail.

Responsibilities

• Support compliance activities and control testing aligned to SOX, ISO 27001, SOC 2, TISAX, and other applicable regulatory and contractual requirements.
• Coordinate internal and external audits by managing evidence collection, maintaining documentation, tracking remediation activities, and supporting certification readiness efforts across applicable frameworks.
• Respond to customer security questionnaires, due diligence requests, and customer-led audits, ensuring accurate and timely representation of the organization's security and compliance posture.
• Maintain and administer cybersecurity compliance frameworks, policies, and standards, ensuring alignment with control requirements across SOX, ISO 27001, SOC 2, and TISAX.
• Prepare and maintain compliance and customer assurance metrics, dashboards, and reports for leadership review and governance forums.
• Administer cybersecurity risk exception and control exception processes, including intake, documentation, tracking, and follow-up activities to ensure timely review and resolution.
• Assist in the preparation of materials and reporting for governance committees, including the Information Security Governance Committee (ISGC).
• Track control ownership, testing schedules, and evidence requests across compliance frameworks to support continuous audit readiness.
• Collaborate with stakeholders across Legal, Privacy, Risk, Sales, Procurement, and business teams to support customer assurance requests, audit response, and compliance initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed