Cyber Security Compliance Analyst

Ledcor • Vancouver, BC

1d • CA$64,800 - CA$89,100 • Remote

About The Position

As the Cyber Security Compliance Analyst, you will support in the execution and continuous improvement of Ledcor’s Cyber Security Compliance and Third-Party Risk Management programs. This role is suited to a developing compliance professional with foundational experience in cybersecurity governance, risk, and compliance (GRC), IT audits, and regulatory frameworks. As the analyst you will support operationalizing cyber security compliance requirements by assisting with control assessments, audit coordination, third-party cyber risk assessments, and compliance monitoring and reporting activities. Working under the guidance of the Senior Specialist, you contribute to ensuring that Ledcor maintains alignment with contractual, legal, and regulatory cybersecurity obligations. Come join our Information Services team today in Vancouver, BC!

Requirements

• Minimum 2 years of experience in cybersecurity governance, risk, and compliance (GRC) or IT compliance
• Experience managing integrated compliance programs, frameworks, and cybersecurity compliance initiatives
• Experience supporting IT audits, internal controls, and compliance certifications (e.g., ISO 27001, PCI, ITGC)
• Experience facilitating third-party/vendor risk management, including security assessments and remediation tracking
• Bachelor's degree in Business, Computer Science, Information Systems, or a related field, with IT audit or compliance experience
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, CIS Controls, and related best practices
• Experience contributing to the development and maintenance of cybersecurity policies, standards, and governance documentation
• Strong project management, analytical, and problem-solving skills, with the ability to work independently and manage multiple stakeholders
• Excellent communication, collaboration, and interpersonal skills, with a proven ability to build positive working relationships and support cross-functional teams

Responsibilities

• Assist in the development, documentation, and maintenance of the IT Compliance Management Program and cybersecurity compliance framework
• Support the implementation and maintenance of cybersecurity compliance baselines aligned with legal, regulatory, contractual, and industry standards (e.g., ISO 27001, SOC 2, NIST)
• Perform control validation, evidence collection, and compliance assessments to support internal reviews, certifications, and regulatory attestations
• Develop and maintain compliance dashboards, metrics, and reporting for management, risk owners, and executive stakeholders
• Coordinate internal and external audit activities, including ITGC, ISO 27001, SOC 2 Type II, and Cyber Essentials audits
• Track audit findings, compliance gaps, remediation activities, and closure status, ensuring timely follow-up with stakeholders
• Execute the third-party risk management program, including vendor onboarding, risk classification, security assessments, and remediation tracking
• Review vendor security documentation, including security questionnaires, SOC reports, and ISO certifications, to assess compliance risks
• Maintain cybersecurity policies, standards, and compliance processes to ensure alignment with evolving regulatory requirements, organizational policies, and industry best practices

Benefits

• competitive total rewards package provides compensation and benefits that support your physical, mental and financial wellbeing
• exciting, challenging work with opportunities to develop your skills and knowledge

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level