Compliance and Risk Specialist

Internal Job Title: Compliance and Risk Specialist

Job Type: Permanent, Full-Time
Job Location: Canada
Work Model: Remote

Position Summary

As a Compliance and Risk Specialist at CBN, you will support the Compliance and Risk team in leading and supporting compliance initiatives, conducting risk assessments and remediation activities, and contributing to the development of security strategies for systems deployed in Canada, the United States, and Europe. This role focuses on determining and assessing compliance direction, coordinating and tracking compliance-related tasks to completion, and ensuring effective collaboration across teams.

Responsibilities

• Compliance Initiatives
  • Manage and track compliance activities around global systems including components of the ISO, SOC 2, and PCI compliance and other jurisdictional compliance regulations.
  • Examine products and engage stakeholders and customers to establish a strategy for handling compliance-at-scale for both compliance-focused and cost-sensitive markets.
  • Prepare documentation and evidence for audits and compliance assessments.
• Security Strategy
  • Manage and coordinate the execution of security strategies and assessments, ensuring all related tasks and deliverables are completed on time and aligned with Canada/US and global security requirements.
  • Support initiatives to identify, investigate, and improve security risks within CBN Operations Global Infrastructure.
  • Enhance CBN’s AppSec pipeline to address risk assessments in an automated fashion at scale based on developed strategies.
• Risk Assessment and Remediation
  • Conduct Risk Assessments within customer systems to quickly assess associated risks, recommend actions, and develop plans for remediation.
  • Understand the risk/compliance gaps in our global systems, articulate a vision, and work across teams to get us there.
• Stakeholder Engagement
  • Report on compliance project status and work with teams to promptly address delays or issues.
  • Take an active role in educating customers, executives, stakeholders, infrastructure personnel, and developers on best practices for security.
  • Build relationships with stakeholders across groups to understand assessment needs, advise on how it should be handled, and the associated notification process.
• Various other Duties and Responsibilities.