Security Consultant I - Compliance & Audit

TELUS • Calgary, AB

11d

About The Position

The Global CSO function for TELUS Health focuses on the Security of Sensitive Health Information (PHI) and regulatory compliance. The Compliance and Customer Assurance team is responsible for obtaining and maintaining compliance reports and certifications such as SOC1, SOC2, ISO27000 series, NIST 800-53, and HITRUST. This involves collaborating across multiple business units to examine security systems, documentation, and processes, ensuring adherence to stringent security and Health standards. The team promotes continuous improvement through effective issues management and compliance monitoring, leads internal audits, gathers compliance evidence, and liaises with external auditors. The Security Consultant I will help accelerate TELUS Health CSO goals in obtaining and retaining assurance reports and certifications, directly impacting client trust and mitigating potential risks.

Requirements

• 2-4 years of experience in an IT audit, compliance role
• 2-4 years of experience analyzing and providing cyber compliance recommendations in a large, complex organization
• 2-4 years of experience collaborating with interdisciplinary team members that are technical and non-technical
• Strong understanding of internal controls, risk assessment, and audit methodologies
• Knowledge of regulatory frameworks and compliance standards (SOC 1, SOC 2, ISO27000 series, NIST800-53)
• Experience with audit tools and documentation software
• A genuine passion for building client relationships and interacting with technology and business stakeholders
• A desire to continuously improve processes and systems to align with industry standards
• An understanding of international cyber security regulations and how they translate into a control framework
• Excellent analytical and problem-solving abilities
• Strong attention to detail and organizational skills
• Superior written and verbal communication skills
• Ability to manage multiple projects and meet deadlines
• Bachelor’s degree in IT, Information Systems, Computer Science, Engineering or related and/or related experience

Nice To Haves

• Industry-recognized certifications (i.e., CISA, OCSP, GICSP, CISSP, and CISM)
• Experience within a regulated business environment
• An insatiable appetite for modern and emerging technologies and tools

Responsibilities

• Conduct comprehensive risk assessments and testing of internal controls and systems, ensuring they operate effectively and as documented
• Review, evaluate, and maintain documentation of control processes, procedures, and system logs to identify potential security vulnerabilities or compliance issues
• Prepare and present detailed audit reports, including findings and recommendations for improvements, to management and stakeholders
• Develop and execute audit plans and schedules, while monitoring changes in regulatory requirements and industry standards relevant to SOC compliance
• Collaborate with various departments to gather evidence, conduct interviews, and document control processes for the audits and certifications
• Monitor and report on remediation efforts for identified control deficiencies, assisting in the implementation of new controls or modifications to existing ones
• Serve as primary liaison with external auditors during the audit and certification examinations, while managing relationships with stakeholders across the organization

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level