Senior Risk and Compliance Specialist

Company Overview  Canadian Bank Note Company (CBN) is a leader and trusted provider of secure document and adjacent enterprise-level system solutions across the following domains: border security, civil identity, driver licence/identification and vehicle information, excise control, currency, lotteries and charitable gaming.
Our Corporate Philosophy and 7 Core Principles shape and guide our corporate behaviours and underpin the sense of community you will experience  seek long-term relationships with our employees and offer a competitive compensation package that includes health, medical and life insurance benefits and a defined contribution pension plan with company matching.
Job Information   Internal

Job Title:

Senior Risk and Compliance Specialist
Job Type:  Permanent, Full-Time

Job Location:

Canada
Work Model:  Remote
Job Status:  Existing Vacancy
Position Summary  As a Senior Risk and Compliance Specialist at CBN, you will be responsible for leading compliance initiatives, conducting risk assessment and remediation activities, and developing security strategies for CBN systems deployed in Canada, the United States and Europe.
Responsibilities   Compliance Initiatives  Lead current ISO 27001, SOC 2, and PCI compliance initiatives for systems in Canada, US, and Europe.
Examine existing initiatives and engage business stakeholders and customers to establish a strategy for handling compliance-at-scale for both compliance-focused and cost-sensitive markets.

Security Strategy  Spearhead initiatives to identify, investigate, and improve security risks within CBN Operations Global Infrastructure.
Design and deliver security strategies, produce architectural models, detailed assessments, and present reports to meet Canada/US and global security requirements.
Research and deliver tooling and strategies for CBN’s App Sec program to address risk assessments in an automated fashion at scale.

Risk Assessment and Remediation  Conduct Risk Assessments within customer systems to quickly assess associated risks, recommend actions, and develop plans for remediation.
Understand the risk/compliance gaps in our global systems, articulate a vision, and work across teams to get us there.

Stakeholder Engagement  Take an active role in educating customers, executives, stakeholders, infrastructure personnel, and developers on best practices for security.
Build relationships with stakeholders across groups to understand assessment needs, advise on how it should be handled, and the associated notification process.

Qualifications  Knowledge and Experience   Education  Bachelor’s degree in Computer Science, Information Technology or related field or an equivalent combination of relevant education and additional work experience

Certification(s)  One (or more) of NIST
800-53, ISO
27001, SOC2 (Type I and II), Fed Ramp, State Ramp
SANA, ISACA or GIAC is an asset

Knowledge  Compliance standards, frameworks and tools
Threat and risk management principles and methodologies
Risk assessment practices and methodologies

Experience  8+ years of direct experience in a compliance, auditing and/or risk position
3+ years of experience developing/delivering compliance assessments
Experience using structured approaches to risk assessment (e.g. HTRA, TRA, ITSG-33, CSF, FSIR, STAR)
Experience using Unified Compliance Frameworks and GRC tools

Experience with Azure/AWS compliance is an asset

Technical Skills   Proficiency with MS 365 Copilot
Presentation skills
Soft Skills And Competencies   Critical thinking skills  Analysis, problem solving

Interpersonal skills  Communication, relationship building, teamwork and collaboration

Organization/time management/prioritization skills
Adaptable
Growth mindset
Mandatory Requirements   Fluency in English (reading, writing, speaking)
Able to obtain and maintain Government of Canada Secret level security clearance
Able to travel domestically and/or internationally (passport required) approx. 1-2 weeks/year
Equal Opportunity Statement  Our organization is committed to employment equity and diversity in the workplace. We actively encourage applications from women, Indigenous Peoples, persons with disabilities, members of visible…