We are looking for a DevSecOps Engineer to lead and strengthen an experienced compliance and security assurance program in Ottawa, Ontario. This Long-term Contract role is centred on expanding an established SOC 2 Type 2 framework beyond core security controls to include confidentiality and availability requirements, while maintaining a strong audit posture. The successful candidate will work closely with stakeholders to build practical controls, maintain continuous evidence collection, and support a resilient, well-governed cloud security environment.

Responsibilities:
• Lead the ongoing management and enhancement of the SOC 2 Type 2 program, with emphasis on broadening coverage to include Confidentiality and Availability Trust Services Criteria.
• Develop, implement, and refine controls related to data classification, secure handling of sensitive information, encryption standards, and role-based access practices.
• Establish and maintain operational controls that support service availability, including backup validation, disaster recovery readiness, capacity planning, and uptime oversight.
• Configure and maintain compliance evidence workflows within Vanta to ensure documentation remains current, accurate, and ready for audit review at all times.
• Act as the primary point of contact for external auditors, coordinate audit activities, and address control or evidence questions to minimize audit findings.
• Partner with technical and business teams to align cloud security practices, configuration management, and cyber security controls with compliance objectives.
• Assess firewall and network security environments, including technologies such as Check Point and Cisco ASA, to support secure infrastructure operations.
• Investigate security and operational issues, troubleshoot control gaps, and recommend corrective actions that improve compliance effectiveness and system resilience.
• 5+ years of experience in DevSecOps, cyber security, IT security, or a closely related discipline.
• Demonstrated experience managing or contributing significantly to SOC 2 Type 2 compliance programs, including audit preparation and evidence management.
• Strong understanding of security controls related to confidentiality, availability, access management, encryption, backup, and disaster recovery.
• Hands-on experience with cloud technologies, configuration management practices, and security-focused operational processes.
• Practical knowledge of firewall and network security platforms, including Check Point, Cisco ASA, and broader Cisco technologies.
• Ability to troubleshoot technical and compliance issues, identify root causes, and implement sustainable solutions.
• Familiarity with tools used for continuous compliance tracking and control monitoring, including platforms such as Vanta.
• Strong communication and stakeholder management skills, with the ability to work effectively with auditors, engineering teams, and business partners.

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

This job posting is for a current vacancy with our client.

Our specialized recruiting professionals apply their expertise and utilize our proprietary AI to find you great job matches faster.

Questions? Call your local office at 1.888.490.4429. All applicants applying for Canadian job openings must be authorized to work in Canada.

Only job postings for jobs located in Quebec appear in French.

© 2025 Robert Half. By clicking “Apply,” you’re agreeing to Robert Half’s Terms of Use and Privacy Notice.