Security Compliance Manager - Jobs in Oakville, ON

Job Description

The OpportunityAs we continue to grow, we’re looking to add a Security Compliance Manager to our growing Security team. We need an individual who will plan, implement, coordinate, and execute compliance programs at GTY. This person will establish and manage a program to ensure ongoing compliance with internal policies, business objectives, regulatory and customer control requirements. This role is hands-on and technical, not about checking boxes from a high level. The ideal candidate will have a proven ability in helping the business select and implement relevant, modern and right-sized controls in a complex cloud-first environment to meet our compliance needs.The ChallengeWhat You’ll Do:

• Prepare for StateRAMP, SOC2, PCI and privacy certifications and manage program activities related to obtaining certifications.
• Management and ensure accurancy of compliance tooling.
• Identify compliance issues that require remediation.
• Evaluate testing procedures and collet evidence for continuous monitoring.
• Lead the completion of Customer Security Questionnaires, ensuring timely completion to support Sales activities.
• Provide expert guidance and subject matter expertise for matters related to security compliance.
• Work with the security team to review security controls and their applicability of proposed risk mitigations.
• Ensure Business Continuity and Disaster Recovery plans are up to date and aligned with business objectives.
• Draft, modify and implement company policies.
• Assess the business’s future ventures to identify possible compliance risks.
• Prepare reports for senior management and external regulatory bodies as appropriate.
• Perform periodic audits on company security & compliance procedures and processes.
• Consult with senior leadership and legal regarding compliance & privacy issues.
• Liase with external auditors and file compliance reports with regulatory agencies
• Evaluate the efficiency and applicability of controls and work with stakeholders to plan and track improvements.
• Coordinate analysis and reporting of information security program metrics.
• Assess product, compliance, or operational risks and recommend risk management strategies.
• Maintain an active risk register.
• Keep up to date of regulatory developments, how they may impact the company as well as evolving best practices in compliance controls.

The Right FitWho You Are:Skills& Experience:

• 5-10 Years of relevant experience across multiple security domains including policy, risk and compliance.
• Information security – strong understanding of governance and compliance standards including SOC2,
• Expert knowledge of StateRamp/FedRAMP, NIST, PCI, CCPA, GDPR.
• Experience orchestrating multiple compliance certification programs.
• Knowledge of IT systems, security controls & Cloud environments. Ability to conduct end to end risk assessments.
• Ability to conduct in-depth analysis of issues pertaining to information security, data protection and internal controls and evaluate multiple factors to solve complex problems.
• Ability to develop, interpret, explain, and implement company policies and procedures.
• Excellent project management and organizational skills orchestrating multiple quarterly and annual audits.
• Self-motivated with the ability to work independently and manage time effectively with limited direction.
• CISA, CRISC or CISM is highly desirable. CISSP, GIAC, Privacy certifications considered assets.
• Methodical and diligent with outstanding planning abilities and a high attention to detail.
• Outstanding communication and interpersonal abilities.
• Experience in a SaaS or cloud-first organization an asset

Core Competencies:

• Risk Management and Assessment
• Results-Driven
• Communication
• Analytic Thinking
• Project Management
• Flexibility
• Influence
• Leadership
• Problem Solving

Key Performance Indicators

• Acquire and maintain security compliance certifications according to business needs.
• Timely completion of Customer Security Questionnaire & RFP responses
• Completion of assigned projects, assessments and audits
• Risk tracking & treatment

Location & TravelThis role will be remote with the possible occasional travel to our beautiful new office in Oakville, Ontario.What Its Like to Work at GTYAt GTY, we carefully foster a work environment where employees have a safe space for creative and intellectual freedom, and the opportunity to work cross-functionally. As part of the GTY Technology family of companies, we offer a dynamic environment with considerable opportunity for professional growth and advancement.Here are some of the perks that GTY employees enjoy:Competitive wagesWe pay competitive wages and salaries, and we only expect an honest 40 hour week for it.

• ️ Wellness days

What’s better than a long weekend An extra long weekend! This summer, lets begin and end the summer with an extra day ontop of the long weekend (July and Sept)! An extra day to decompress and spend time doing the things you love.Community Engagement CommitteeAt GTY, we know how important it is to give back. Our community engagement committee looks for ways to give back to our local communities through time, gifts and skills.Flexible time and remote workWe understand that what a workday looks like differs by employee and the role requirements. Through our interview process we’ll work with you to ensure its a fit for you and the specific role you’re interested in.BenefitsAsk us for a copy of our health and dental benefits!Culture committeeCelebrate at every occasion with the culture team! They make sure that our team’s culture is bustling, with frequent fun events for holidays and special occasions, as well as for miscellaneous fun.About GTY Technology Holdings Inc.GTY Technology Holdings Inc. (“GTY”) is a leading public sector technology company. Through its six business units, GTY offers an intuitive cloud-based suite of solutions for state and local governments, education institutions, and healthcare organizations spanning functions in procurement, payments, grant management, budgeting, and permitting.Please visit our website: https://www.gtytechnology.com/careers/ and check out our Life Pages: https://www.linkedin.com/company/gtytechnology/life/.We believe in embracing new perspectives and optimizing impact. If you have relatable experience and relevant transferrable skills but feel you may be missing a few of the requirements, we encourage you to apply! We recognize that people have unique career journeys and if youre excited about this role and know you can bring something great to the team, then we want to hear from you. Please know GTY is committed to providing a comfortable and accessible interview process for every candidate. If there are any accommodations our team can make throughout our hiring process (big or small), please let us know.For any inquiries or requests regarding accessibility at GTY, please email [email protected] or call our office at 1.877.707.7755. Upon request, appropriate accessible formats or arrangements will be provided as soon as practicable.Quick Apply

• Terms & Conditions
• New Privacy
• Privacy Center
• Accessibility

For Job Seekers

• Browse Jobs
• Advanced Job Search
• Emplois Quebec

For Employers

• Post a Job

Stay Connected