(Remote) Compliance & Governance Specialist at Harris Computer

, Ontario, Canada -

Full Time

Start Date

Immediate

Expiry Date

05 Sep, 26

Salary

100000.0

Posted On

07 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SOC 2 Type II, ISO 27001, ISO 42001, Risk Management, Information Security Compliance, Internal Auditing, Vendor Risk Management, Azure, AI Governance, Control Mapping, Gap Assessment, ISMS, AIMS, Evidence Automation, KPI Reporting, SDLC

Industry

Software Development

Description

Cayenta, a division of Harris; is seeking a Security Governance & Compliance Specialist who will join the team to lead the design, implementation, and ongoing oversight of the organization's compliance frameworks. This includes provide security controls across our product and cloud environments. Your work will reduce customer risk, improve audit outcomes, and strengthen resilience through measurable, automated governance. This is a senior individual contributor role with broad influence across all teams, including Legal. In this role, you will be responsible for identifying, assessing and supporting the management of information security risks across the organization. Reporting to the Director of Cloud, Security & Compliance, this role contributes to Cayenta’s security posture by implementing security and IA governance frameworks. You report to the Director of Cloud, Security & Compliance. You are expected to operate with significant autonomy, own your programs, manage your audit timelines, and drive cross-functional work. This remote role welcomes candidates anywhere in Canada. Preference will be given to candidates who can work in PST timezone. Salary: 95K - 100K What your impact will be: Primary Focus Own and manage the organization's security compliance programs, including SOC 2 Type II, ISO 27001, ISO 42001, and other relevant frameworks. Own audit readiness end-to-end: gap assessments, control mapping, auditor coordination, walkthroughs, and remediation follow-up. Turn framework requirements into clear, actionable, and lightweight controls that teams can operate without slowing delivery. Drive evidence collection automation in partnership with Engineering; the goal is evidence-by-default. Maintain scope, context, governance artifacts, and Statement of Applicability. Run internal audits, manage CAPAs, and sustain certification readiness. Evaluate control design and operating effectiveness; identify gaps and drive actionable remediation. Maintain the AIMS: AI use-case inventory, impact assessments, and human oversight controls. Collaborate with AI-Ops on model documentation (model cards), bias/fairness testing, explainability, drift monitoring, and adversarial robustness controls. Produce compliance dashboards and KPI reporting for leadership and customers. Evaluate control design and operating effectiveness against internal policies/standards and external frameworks; identify control gaps and actionable recommendations. Operationalize and sustain the ISMS (ISO/IEC 27001) and AIMS (ISO/IEC 42001), including scope, context, governance, and required. Risk & Vendor Management Lead third-party/vendor risk management: due diligence, review of security documentation, contract/control requirements, and tracking vendor remediation and data-protection alignment. Evaluate residual risk and support risk acceptance decisions with documented rationale. Cross-Functional Enablement Collaborate with the AI-Ops team in building and maintaining AI-Governance. Manage the responsible AI policy lifecycle alongside the AI Ops team. Collaborate with the AI-Ops team in implementing AI risk/model governance controls aligned to ISO/IEC. Work with "Engineering" in automating the collection of evidence and control testing, internal audits, managing CAPAs, and maintaining continuous audit readiness. Partner with Engineering, Product, and Legal to bake in controls into the SDLC. Translate framework requirements into plain-language controls that engineers can operate without slowing delivery. Collaborate with the "Security" team in identifying, evaluating and acting on vulnerabilities reported by our monitoring systems and/or external channels. Work closely with the "Security" team in the coordination and execution of the different frameworks. Reporting and CPI Produce compliance reporting and dashboards. Define and track security & compliance KPIs, lead management reviews to ensure a healthy compliance posture to stakeholders. Drive continuous improvement of risk and control maturity based on trends, audit results, and business impact. How You'll Work You report to the Director of Cloud, Security & Compliance. You are expected to operate with significant autonomy, own your programs, manage your audit timelines, and drive cross-functional work. What we are looking for: 5+ years in information security compliance, risk management, or audit, with hands-on SOC 2 Type II experience as the primary requirement. Deep working knowledge of SOC 2 Trust Services Criteria and practical audit mechanics. Experience operationalizing ISO 2700, maintaining an ISMS, managing CAPAs, and sustaining certification. Ability to assess control design and operating effectiveness, identify gaps, and drive remediation without authority over the teams implementing fixes. Strong written communication. You will produce risk registers, control documentation, dashboards, and audit artifacts that engineering and legal teams rely on. Comfort working in a cloud-native environment (Azure) and understanding how infrastructure decisions affect control coverage. What would make you stand out: Experience with ISO 42001 or AI/ML governance frameworks, model risk management, responsible AI policy, or AI impact assessments. Background in regulated industries: utilities, municipalities, government. Familiarity with evidence collection automation. CISSP, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent certification. What we can offer: 3 weeks’ vacation and 5 personal days Comprehensive Medical, Dental, and Vision benefits starting from your first day of employment Employee stock ownership and RRSP/401k matching programs Lifestyle rewards Remote work and more! About Cayenta: Cayenta is a leading provider of enterprise resource management solutions in the local government, utility and financial industries. Cayenta’s products, services and customer relationships provide the foundation for continued innovation and growth. About Harris: Harris is a leading provider of mission critical software to the public sector in North America. As a wholly owned subsidiary of Constellation Software Inc. (“CSI”, symbol CSU on the TSX), Harris has become the cornerstone for CSI’s investment in utility, local government, school districts, public safety, and healthcare software verticals. Our success has been realized through investments in our proprietary software and market expertise. This focus, combined with acquiring businesses that build upon or complement our offerings, has helped drive our success. Harris will continue to growth through reinvestment – both in the people and products that we offer and making investments in acquiring new businesses. #LI-remote At Harris, we believe great people build great software. We offer an environment where employees are empowered to make a real impact, grow their skills, and shape their careers. Our teams enjoy a supportive, award‑winning culture, a casual and collaborative workplace, and opportunities to learn from a diverse group of businesses and industries. We are financially strong and proudly part of Constellation Software Inc. (CSI), the largest software company in Canada, providing long‑term stability alongside entrepreneurial autonomy. In addition to a competitive compensation and benefits package, we offer meaningful perks, flexibility, and—most importantly—a culture that values people, curiosity, and having fun while doing great work. Follow us on LinkedIn to learn more about our culture, values, and career opportunities. Harris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Applicants who require a reasonable accommodation due to a disability may contact us by email at HarrisTalentAcquisition@harriscomputer.com. Accommodation requests may be made at any time. This email address is dedicated solely to accommodation requests and cannot be used to inquire about application status. Know Your Rights Poster EO 13496: Notification of Employee Rights under Federal Labor Laws Our commitment to fair and equitable hiring. As part of our recruitment process, we use artificial intelligence (AI) tools during the initial screening phase to help identify candidates whose qualifications most closely align with the requirements of the role. This technology supports efficiency and consistency in the early stages, but it never replaces human judgement. All subsequent evaluations and final hiring decisions are made by our recruitment professionals. AI does not make final hiring decisions.

Responsibilities

Lead the design and implementation of security compliance frameworks including SOC 2 and ISO standards to reduce customer risk. Manage end-to-end audit readiness, vendor risk assessments, and the operationalization of AI governance controls.