Junior Compliance Specialist

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee and uphold the compliance program and GRC platform, encompassing controls, evidence, and follow-up actions.

• Manage the risk register while monitoring vulnerabilities, non-conformities, corrective measures, and timelines.

• Update and maintain compliance policies, procedures, and controls regularly.

• Organize preparations for audits, certifications, and compliance initiatives, including ISO 27001 and ISO 9001.

• Track indicators for ISO 27001 objectives and activities related to ISO 9001, and compile materials for management evaluations.

• Coordinate penetration testing, attestations, and various security assessments.

• Assist with change governance and compliance obligations for production deployments.

• Engage in risk assessments for new vendors, partners, integrations, and projects.

• Initiate follow-ups 60–90 days prior to audits, attestations, penetration tests, access reviews, renewals, and evidence requirements.

• Ensure timely completion by following up with owners of controls, risks, non-conformities, and corrective actions.

• Address client and prospect inquiries regarding security, privacy, and compliance, including RFPs and due diligence efforts.

• Facilitate Privacy Impact Assessments and risk evaluations for new AI tools or use cases.

• Manage security and compliance training and awareness initiatives.

• Keep track of regulatory changes and pinpoint requirements that necessitate action.

• Oversee compliance tasks during incidents involving privacy or security.

• Collaborate with teams in security, technology, product, operations, and with external partners.

⛳️ Requirements

• 2 to 5 years of pertinent experience in the IT sector.

• Background in compliance, governance, risk management, information security, or a related discipline.

• Strong technical skills with the ability to quickly adapt to new tools.

• Solid understanding of audit and compliance management processes.

• Familiarity with ISO 27001 and ISO 9001 standards is a considerable advantage.

• Experience in the healthcare field or within a highly regulated environment.

• Keen interest in emerging technologies, artificial intelligence, and automation.

• Proficient in monitoring KPIs and generating reports; experience in reporting is advantageous.

• Exceptional ability to manage priorities, files, deadlines, and requirements.

• Eagerness to learn and explore new concepts.

• Strong analytical capabilities and the ability to juggle multiple priorities.

• Excellent verbal and written communication skills in both French and English.

🏝️ Benefits

• Part-time schedule of 3 days per week.

• Remote work opportunity.

• Chance to collaborate with a Canadian digital health company on large-scale digital health solutions.

• Work alongside teams in security, technology, product, operations, and with external partners.

• Gain exposure to audit, risk management, certification, and compliance processes.

• Access to learning opportunities involving emerging technologies, artificial intelligence, and automation.