WHAT YOU WILL DO Security Guidance for Certification Readiness Advises business units on security requirements applicable to their certification, attestation, assessment, or regulatory scope (e.g., SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and applicable Nacha requirements) Reviews security documentation, policies, and procedures for completeness and alignment with certification requirements and other applicable security and compliance obligations Identifies security-related gaps that may need remediation prior to an external audit Advises on proactive evidence collection, since evidence requests often begin broad (e.g., lists of computers or projects) before narrowing to specific items (e.g., a specific workstation or project); encourages early and continuous evidence gathering rather than waiting for detailed requests Documentation Standards Guidance Advises businesses that meetings related to internal audits, business continuity, disaster recovery, and external penetration tests should be well documented with agendas and minutes to support evidence collection during audits and assessments Reviews documentation practices to confirm they will hold up to auditor scrutiny from a security perspective Shared Services & Third-Party Scoping Provides security-focused input on how shared services and corporate/administrative support functions (such as centralized IT, HR, finance, or legal services provided by a parent or corporate entity) should be classified within the audit scope—specifically whether the relationship should be treated as inclusive or carve-out Advises on scenarios where a business unit relies on a shared services provider for security-relevant reporting it cannot generate independently (e.g., workstation patching reports or password settings), which typically indicates an inclusive scoping approach rather than carve-out Recommends involving the shared services provider (e.g., a Corporate IT function) as early as possible in the audit, assessment, or certification process, since certain evidence requests—such as workstation lists, vulnerability scan reports, or patching audit logs—may require lead time to fulfill Security Control Recommendations Recommends security controls and improvements needed to satisfy the requirements of the applicable framework Provides guidance on password settings, patching cadence, and other technical security configurations commonly requested as audit evidence Reviews penetration test scope and results from a security standpoint to determine whether they provide appropriate evidence for applicable audit, assessment, or certification requirements Audit Coordination Support Works in coordination with the business unit's internal audit team and external auditors throughout the audit, assessment, or certification process Participates in audit planning discussions to ensure security evidence and controls are appropriately represented Supports communication between the business unit and any shared services or corporate support functions needed to fulfill audit evidence requests Assists in tracking security-related audit findings through to remediation and closure Collaborates with corporate support functions (IT, HR, Finance, Legal) when their services fall within the audit scope, ensuring timely delivery of required reports and documentation WHAT WILL MAKE YOU STAND OUT Attention to Detail Analytical Thinking Communication Proficiency Advisory/Consultative Skills Collaboration Project Coordination WHAT ARE WE LOOKING FOR Security & Compliance Experience Three or more years of relevant experience assessing security and compliance requirements, including hands-on evaluation of technical security controls and supporting audits, assessments, or certification-readiness activities. Experience advising on security controls required for SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and Nacha requirements Familiarity with common security evidence requirements referenced during audits (e.g., patching reports, password settings, penetration test results) Understanding of inclusive vs. carve-out scoping considerations for shared services or third-party relationships from a security perspective Experience coordinating with internal audit teams, external auditors, and corporate support functions during audit, assessment, and certification processes Documentation & Standards Knowledge Understanding of documentation standards expected for internal audits, business continuity, disaster recovery, and penetration testing activities Experience evaluating the design, implementation, and operating effectiveness of administrative and technical security controls and clearly documenting identified gaps Required Training and Education Bachelor's degree in Information Security, Computer Science, or related field Equivalent work experience may substitute for degree requirement Preferred Certifications CISSP (Certified Information Systems Security Professional) ISO 27001 Lead Implementer CISA (Certified Information Systems Auditor) PCIP (Payment Card Industry Professional) and willingness and ability to obtain PCI ISA (Internal Security Assessor) after hire if PCI DSS responsibilities are assigned Key Deliverables Security gap analysis reports Security control recommendations for audit readiness Guidance documentation on evidence types typically requested by auditors Security-focused scoping recommendations for shared services relationships Coordination notes/reports supporting audit evidence collection timelines COMPENSATION DETAILS The potential salary range for this role is $80,000 to $90,000 per year, with eligibility for bonus or merit program. Final compensation will be based on experience, skills, market conditions, and internal equity. We offer a competitive Total Rewards program including health benefits, RRSP matching, stock option, and career development opportunities. At Harris, we believe great people build great software. We offer an environment where employees are empowered to make a real impact, grow their skills, and shape their careers. Our teams enjoy a supportive, award‑winning culture, a casual and collaborative workplace, and opportunities to learn from a diverse group of businesses and industries. We are financially strong and proudly part of Constellation Software Inc. (CSI), the largest software company in Canada, providing long‑term stability alongside entrepreneurial autonomy. In addition to a competitive compensation and benefits package, we offer meaningful perks, flexibility, and—most importantly—a culture that values people, curiosity, and having fun while doing great work. Follow us on LinkedIn to learn more about our culture, values, and career opportunities. Harris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Applicants who require a reasonable accommodation due to a disability may contact us by email at [email protected]. Accommodation requests may be made at any time. This email address is dedicated solely to accommodation requests and cannot be used to inquire about application status. Know Your Rights Poster EO 13496: Notification of Employee Rights under Federal Labor Laws Our commitment to fair and equitable hiring. As part of our recruitment process, we use artificial intelligence (AI) tools during the initial screening phase to help identify candidates whose qualifications most closely align with the requirements of the role. This technology supports efficiency and consistency in the early stages, but it never replaces human judgement. All subsequent evaluations and final hiring decisions are made by our recruitment professionals. AI does not make final hiring decisions.

Security Compliance Specialist.

more at harriscomputer.com.

Gestionnaire de projet

Sr IT Cyber Defense Analyst

Analyste financier·ère

similar roles.

Senior Policy Manager

From the Zalos team

Newsroom

Cloud Security Architect, CISO Support (RMF)

Unarmed Security Officers- Bowling Green, OH

Unarmed Security Officers- Bowling Green, OH