Security & Compliance Analyst

Jesta I.S.

. Act as primary liaison between internal teams and external auditors for SOC 1 and SOC 2 audits .

Posted 11/3/2026full-timeMontreal • CanadaJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SOC 1 and SOC 2 compliance, security operations, and risk management, with a strong focus on implementing security controls and coordinating audits. Proficient in using AI-assisted security tools and collaborating with cross-functional teams to enhance security governance and compliance.

Highest-signal resume keywords

SOC 1 ComplianceSOC 2 ComplianceISO 27001:2022 KnowledgeSecurity Operations ExperiencePenetration Testing Coordination

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsRisk ManagementAudit ProcessesVulnerability ManagementIncident TriageLog AnalysisControl ImplementationSecurity AutomationKQLPowerShell

Soft Skills

CollaborationMentoringCommunication

Tools & Technologies

Microsoft Defender XDRMicrosoft SentinelMicrosoft CopilotSIEM PlatformEndpoint Protection ToolsNetwork Security ToolsAzure Security ServicesAWS Security ServicesOCI Security ServicesPower Automate

Certifications & Qualifications

Security+CISACISSP

Industry Keywords

NIST FrameworkCIS FrameworkControl TestingAudit DocumentationSecurity GovernanceCompliance ProgramsCybersecurity Incident ResponseThreat IntelligenceContinuous ImprovementProject Management

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Act as primary liaison between internal teams and external auditors for SOC 1 and SOC 2 audits
Track control owners' responses and audit timelines
Collect, validate, organize, and maintain control evidence and audit documentation
Implement and maintain security controls with infrastructure and support teams
Track compliance, exceptions, and remediation timelines
Monitor security alerts, analyze logs, investigate in SIEM/XDR, triage incidents, detect threats, and support critical cybersecurity incident response
Coordinate patch management across on-premises and cloud environments
Scan for vulnerabilities, analyze security advisories, prioritize risks, track remediation, and validate fixes
Plan and coordinate internal and external penetration tests and track findings to closure
Analyze endpoint, network, and cloud telemetry; recommend actions and tune detections
Work with IT, DevOps, and cloud teams on configuration, coverage, and response workflows
Automate tasks to reduce downtime and improve deployment consistency
Support security initiatives, risk assessments, control testing, ISO 27001:2022 alignment, and continuous improvement
Use Microsoft Copilot and AI-assisted security tools for analysis, documentation, log analysis, incident investigation, threat intelligence, vulnerability analysis, and reporting; validate AI-generated output
Own SOC 1 and SOC 2 compliance programs and lead organization-wide audit coordination
Lead penetration-testing strategy, remediation validation, and reporting to leadership
Mentor junior analysts and guide cross-functional teams on security and compliance best practices
Contribute to security governance, ISO 27001, NIST, and CIS framework alignment, and long-term risk reduction

Requirements

What you’ll need

2+ years of relevant security and compliance experience, including SOC 1 / SOC 2 audit involvement in a tech or software company and hands-on security operations (6+ years for senior level)
Strong grasp of internal controls, risk management, and audit processes
Practical knowledge of ISO 27001:2022, including ISMS, security risk assessments, control implementation, audit evidence, and continuous improvement
Experience coordinating penetration tests and driving remediation
Hands-on experience with SOC/security investigation, including alert monitoring, log analysis, incident triage, and vulnerability management
Familiarity with endpoint protection and network security tools
Practical knowledge of Microsoft Defender XDR, Entra ID security monitoring, MFA, Conditional Access, and a SIEM platform such as Microsoft Sentinel or equivalent
Proficiency with Microsoft Copilot or equivalent approved AI tools, including responsible use of AI-assisted security tools such as Microsoft Security Copilot or equivalent
Proven collaboration with IT, DevOps, and Support teams
Bilingual communication in English and French
College or university degree in IT, Cybersecurity, or a related field, or equivalent experience
Knowledge of NIST and CIS frameworks
Project-management coordination experience
Exposure to Azure, AWS, and OCI security services and automation
Basic experience with security automation, KQL, PowerShell, Power Automate, or equivalent technologies
Security or compliance certifications such as Security+, CISA, or CISSP are an asset

Benefits

Comp & perks

Hybrid work (minimum 2 days per week in the Montreal office) and flexible schedule
Medical, dental, disability, and life insurance
Training platforms
Career development fee subsidy
Gym membership reimbursement
Company events
Referral program