Cybersecurity & Compliance Consultant

About the role

We are looking for a Cybersecurity & Compliance Consultant to support client engagements across SOC 2, ISMS, data‑privacy and PCI DSS assessments. The role involves scoping, documentation, evidence collection, remediation tracking and audit‑readiness activities, working on‑site in Bridgetowne, QC, Monday‑Friday, 9 am‑6 pm.

Key responsibilities

• Support SOC 2 Type 1 and Type 2 assessments, including scoping, control documentation, evidence gathering and audit readiness.
• Assist with ISMS (ISO 27001) assessments, control reviews and action‑item tracking.
• Conduct privacy assessments such as PIAs and DPIAs, and track remediation for GDPR, CCPA and local regulations.
• Perform PCI DSS gap analyses, evidence collection and documentation review.
• Coordinate with clients, auditors, QSAs, legal and technology teams to collect required information.
• Prepare assessment reports, trackers and other compliance deliverables.

Required profile

• Bachelor’s degree in Computer Science, IT, Information Systems or related field (preferred).
• 6 months to 2 years of experience in cybersecurity, GRC, IT audit or related areas.
• Exposure to at least one framework such as SOC 2, PCI DSS, ISO 27001, NIST or data‑privacy regulations.
• Relevant certifications (CISA, ISO 27001, Security+) are a plus.
• Strong analytical, documentation and communication skills.

Required skills

• SOC 2 Trust Services Criteria
• PCI DSS
• ISO 27001 / ISMS
• NIST framework
• GDPR and CCPA privacy requirements
• Risk management and internal controls
• Compliance documentation and evidence gathering