{"id":1316747,"url":"https://alion.io/job/candescent-information-security-consultant-i","title":"Information Security Consultant I","company":{"id":2113992,"name":"Candescent","domain":"candescent.com","url":"https://alion.io/company/candescent-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":15,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-28T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Waterloo, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":80000,"max":100000,"currency":"CAD","period":"year","gross":null,"usd_annual":70722},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-08-28T00:00:00Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-09-27T20:03:55Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"Candescent is a forward-thinking technology company transforming how financial institutions deliver Intelligent Banking experiences. We unite digital banking, account opening, and branch solutions that power and connect digital banking, account opening, and branch solutions-creating seamless engagement across digital, remote, and in-person channels.\nOur Experience-Led, Intelligence-Driven approach combines human-centered design with data, automation, and cloud-based innovation. Built on an API-first architecture, our extensible ecosystem enables institutions to adapt quickly, integrate easily, and unlock new opportunities for growth-turning every customer interaction into a moment of clarity, confidence, and connection.\nCandescent is seeking an experienced Audit & Compliance Analyst to support the execution of the company's audit and compliance programs. This role is responsible for coordinating assigned audits, maintaining compliance evidence, validating controls, tracking remediation activities, and supporting customer and regulatory compliance initiatives.\nThe ideal candidate has experience within banking, financial services, or fintech environments and possesses strong expertise in SOC 2 Type II and PCI DSS compliance programs. The Audit & Compliance Analyst will work closely with control owners, auditors, information security teams, and business stakeholders to ensure audit readiness and successful compliance outcomes.\nKey Responsibilities\nSupport the execution of assigned compliance programs and audit engagements.\nCoordinate annual SOC 2 Type II audits and PCI DSS, and other assessments as needed.\nCollect, organize, and maintain audit evidence and supporting documentation.\nPartner with control owners to validate control design and operating effectiveness.\nTrack audit findings, risk items, corrective actions, and remediation activities through closure.\nAssist with customer security assessments, due diligence requests, and compliance questionnaires.\nSupport regulatory examinations and internal compliance reviews.\nMonitor compliance activities against applicable requirements, including PCI DSS, FFIEC guidance, GLBA, and related industry standards.\nDevelop audit status reports, compliance metrics, and management reporting.\nParticipate in control readiness reviews and continuous compliance improvement initiatives.\nMaintain compliance repositories, documentation libraries, and audit workpapers.\nCollaborate with Information Security, Technology, Product, Legal, and Operations teams to support audit and compliance requirements.\nRequired Qualifications\nBachelor's degree in Information Systems, Cybersecurity, Business, Accounting, Finance, or a related field.\n3-7 years of experience in audit, compliance, information security, risk management, or governance functions.\nExperience supporting or managing SOC 2 Type II audits.\nExperience supporting or managing PCI DSS compliance assessments.\nKnowledge of banking and financial services regulatory requirements.\nUnderstanding of control testing, evidence collection, and audit readiness processes.\nStrong organizational skills with the ability to manage multiple concurrent audits and compliance initiatives.\nExcellent written and verbal communication skills.\nHybrid Waterloo office\nPreferred Qualifications\nExperience working in a banking, fintech, or financial technology organization.\nProfessional certifications such as CISA, PCI ISA, CRISC, CISM, or CIA.\nExperience supporting customer-facing compliance and assurance activities.\nFamiliarity with control frameworks such as FFIEC, NIST CSF, SOC 2 Trust Services Criteria, and PCI DSS.\nWhat Success Looks Like\nSuccessful completion of assigned SOC 2 Type II and PCI DSS audit activities.\nAccurate and timely collection of audit evidence.\nTimely remediation and closure of audit findings.\nHigh customer satisfaction with compliance support activities.\nStrong audit readiness across assigned business units.\nConsistent delivery of accurate compliance reporting and documentation.\nAt Candescent, the Audit & Compliance Analyst plays a key role in building trust with customers, auditors, and regulators while helping ensure the security, compliance, and resilience of the products and services that power financial institutions.\nThe base salary range for this position is 80,000 - 100,000 CAD per year. This range represents the expected base compensation for this role and is based on factors such as skills, experience, geographic location, and job-related qualifications.\nStatement to Third Party Agencies\nTo ALL recruitment agencies: Candescent only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, Candescent employees, or any Candescent facility. Candescent is not responsible for any fees or charges associated with unsolicited resumes.","description_format":"text","description_chars":4864,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Credit Unions & Cooperative Banks"],"lifecycle":[{"event":"open","at":"2026-09-26T19:14:45Z"}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.391,"p_room":0.55,"age_days":31,"expected_fill_days":30,"reasons":["conf:9","stale_co","velocity","win:tail","comp:junior"],"computed_at":"2026-09-28T05:45:00Z"},"pay":{"stated_usd_annual":70722,"is_top_pay":false},"html_url":"https://alion.io/job/candescent-information-security-consultant-i","json_url":"https://alion.io/job/candescent-information-security-consultant-i.json","meta":{"generated_at":"2026-09-29T00:19:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":259,"day_limit":5000,"remaining_today":4741,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}