Senior Consultant – ISO 27001, SOC 2, GDPR, and Law 25

About Quantum Beyond

Quantum Beyond advises companies and organizations on their strategic decisions related to technology, artificial intelligence, cybersecurity, digital sovereignty, and organizational transformation. Our experts work independently alongside leadership teams and strengthen internal teams as well as their technology partners.

Your mission

You will guide organizations in putting in place the controls, practices, and governance mechanisms that allow them to meet the requirements of ISO 27001, SOC 2, GDPR, and Quebec's Law 25.

Key responsibilities

• Conduct gap analyses.
• Determine the scope of compliance programs.
• Design or improve security management systems.
• Map requirements, risks, controls, and supporting evidence.
• Draft the necessary policies and procedures.
• Support privacy impact assessments.
• Prepare organizations for external audits and reviews.
• Organize the mechanisms for sustaining compliance.
• Support internal leads in developing their capabilities.

Profile sought

• A minimum of 7 years of relevant experience.
• In-depth knowledge of at least two of the four targeted frameworks.
• Experience in implementation, audit, or audit preparation.
• Excellent analytical, writing, and communication skills.
• Understanding of operational and technological realities.

Assets

• ISO 27001 Lead Implementer or Lead Auditor.
• CISA, CIPM, CIPP/C, or a comparable designation.
• Experience with Canadian companies operating internationally.

Conditions

Location (on-site and remote), compensation based on experience, benefits, and working arrangements: to be discussed or determined...