LifeWorks Looking for Security Compliance Specialist at Toronto Full Time

Build a meaningful career

At LifeWorks, we offer more than career opportunities, we provide career opportunities to make meaningful contributions to people’s lives.  The extraordinary expertise of a more than 7,000-strong workforce is harnessed to support the employees and families of the organizations we serve. Our innovative programs have a lasting impact on the health, financial security and productivity of 24,000 workplaces.

This role is responsible for setting best practice, implementing, evolving, and operating the enterprise IT Security Compliance Program using established frameworks (i.e., NIST, ISO) and for providing subject matter expertise to LifeWorks in meeting its security compliance obligations to stakeholders.

Job Duties:

• Manage the for the design and implementation of IT Security Compliance Program.
• Assist senior management in the selection and implementation of an enterprise compliance tracking tool. Initially implement this tool to demonstrate compliance to selected NIST controls for one core benefits administration system. Then expand this to more controls, more systems, and eventually more frameworks.
• Coordinate and perform ongoing monitoring of compliance to the security framework controls.
• Manage external IT compliance assessments / audits to ensure they are completed on time and within budget, with no preventable deficiencies or gaps noted.
• Automate and coordinate the assessment evidence gathering process to ensure assessments / audits are as efficient as possible.
• Provide support to third party risk assessors when IT risks are significant.

Job Requirements:

• Professional certification or formal training in one or more of: IT Security, Compliance, Audit, Risk
• Minimum of 5 years of relevant experience in organizations that are compliant with one or more of NIST, ISO, FEDRAMP, CSA-STAR
• Advanced knowledge of IT Security risks and controls imbedded in all areas of IT and business operations
• Understanding of IT and data management systems to assess security systems and controls in place to protect personal information
• Demonstrated project management, organization, communication, and presentation skills
• Demonstrated experience and skills in collaboration, teamwork, and problem solving

Nice to haves:

• Experience in executing IT controls audit or compliance programs, risk management, analysis and operational improvement using change management and project management principles.
• Experience in implementing compliance monitoring tools.

#LI-SE1

Where permitted by law, LifeWorks employees must be fully immunized to access a LifeWorks office or customer premises.

Persons with disabilities who need accommodation in the application process or those needing job postings in an alternative format may e-mail a request to talentacquisitiononboarding@lifeworks.com

Fulfilling work that matters

LifeWorks is in the business of helping organizations help their people and in the process, we strive to elevate ours. We’re always looking for talented professionals and strategic leaders looking to make a difference in the lives of the people we serve. We appreciate the interest of every applicant; however, we contact only those selected for an interview.

At LifeWorks, we are committed to putting our people first.  Our priority is to optimize the health and productivity of our people.  In light of COVID-19, our company continues to monitor the global situation and following local guidance in each of our communities to ensure the health and wellbeing of our employees.  Safety is our highest priority, and while the goal is to ultimately return to the office, we are currently working remotely and are connecting with candidates through virtual interviews, recruitment events, and information sessions.  We are excited to connect with you virtually, and look forward to receiving your application.