Find work in Canada.

330,149 jobs across our Canadian network. How we count

Jobs in Canada

Save this search

Risk Systems Analyst
Fidelity Canada
Calgary, AB · Toronto, ON · Montreal, QC
Full-time
The Risk Systems Specialist acts as both a technical GRC platform expert and a strategic problem solver, enabling Fidelity Canada’s Technology Risk functions through the effective use of…
Risk Analyst V
Robertson & Company Ltd.
Toronto, ON
Contract
Good understanding of risk management, governance compliance and controls practices
Inventory Control Analyst
ARC'TERYX
North Vancouver, BC
Full-time
As an Inventory Control Analyst, you will support the accuracy, integrity, and governance of retail and warehouse inventory across North America. Working closely with the Manager, Inventory…
Inventory Control Analyst
Arc'teryx Equipment
North Vancouver, BC
Full-time
As an Inventory Control Analyst, you will support the accuracy, integrity, and governance of retail and warehouse inventory across North America. Working closely with the Manager, Inventory…
Sr. Customs Compliance Analyst
Crane Worldwide Logistics
ON
Full-time
Analyze broker and import data to identify compliance risks and duty savings opportunities.
Governance, Risk & Control / Financial Reporting Controls Intern / Co-Op Winter 2027
TD
Toronto, ON
Full-time
As a Junior Analyst, Finance GRC, you will be responsible for testing of Finance's risk management programs and controls, including financial reporting controls.
Analyste GRC / GRC Analyst
Explorance
Montreal, QC
Full-time
L'analyste en gouvernance, risques et conformité (GRC) coordonne et met en œuvre les activités quotidiennes des programmes de gouvernance, de risques, de conformité, d'assurance de la…
Junior Risk Analyst
Corpay
Toronto, ON
Corpay is currently looking to hire a Junior Risk Analyst within our Risk division. This position falls under our Cross-Border line of business and is in Toronto, ON. In this role, you will…
GRC Analyst
Benevity
Vancouver, British Columbia
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
GRC Analyst
Benevity
Toronto, Ontario
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
GRC Analyst
Benevity
Calgary, Alberta
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
GRC Analyst
Benevity
Canada
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
Governance & Control Analyst Intern/Co-op (Winter 2027)
TD
Toronto, ON
Full-time
The successful candidate will support the risk-based review of various strategic initiatives for TD Life and Health, support regulatory filings, and support the implementation of controls…
PCI Compliance Analyst
GFL Environmental Inc.
Vaughan, ON
Full-time
Risk & GRC Integration: Map general controls to the PCI DSS Risk Control Matrix (RCM), catalog in-scope environments, define Key Risk Indicators (KRIs), and integrate PCI requirements into…
Senior Information Security, GRC Analyst
Cassels Brock & Blackwell LLP
Toronto, ON
Full-time
Cassels is seeking a Senior Information Security, GRC Analyst in our Information Technology department, reporting to the Assistant Director, Information Security. This role provides…
Financial Controls and Communications Analyst
University of Waterloo
Waterloo, ON
Full-time
The Financial Controls and Communications Analyst is accountable for the execution of activities relating to the review of transactions and processes to ensure controls are adequate,…
Analyst, Enterprise Risk - Internal Audit & Controls
MNP
Montreal, QC
Full-time
Make an impact with our Enterprise Risk - Internal Audit & Controls team as an Analyst. This diverse team of professionals utilizes leading-edge industry knowledge to assist clients in…
Analyst, Enterprise Risk - Internal Audit & Controls
MNP
Montreal, QC
Full-time
Make an impact with our Enterprise Risk - Internal Audit & Controls team as an Analyst. This diverse team of professionals utilizes leading-edge industry knowledge to assist clients in…
COMPLIANCE ANALYST
Ensign Energy Services Inc.
Calgary, AB
We are seeking a detail-oriented person to support our Compliance and Internal control function. In this role, you will assist with operational audits by monitoring business operations and…
Security Risk Analyst
Zodiac Solutions, Inc
Montreal, QC
Full-time
The role will focus on identifying control gaps, evaluating risk exposure, validating compliance with security policies and regulatory requirements, and providing actionable recommendations…
Senior Analyst, Credit Risk Strategy Oversight
BMO
Toronto, ON · BMOPLACE
Join a purpose‑driven team at the centre of BMO’s risk management ecosystem. As a Senior Analyst, Credit Risk Strategy Oversight, you will contribute analytical depth, structured review,…
Senior GRC Analyst
Benevity
Calgary, Alberta · Vancouver, British Columbia · Toronto, Ontario
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
Senior Analyst, Non Trading Market Risk (New or Recent Graduate Opportunity) Immediate Start Date
BMO
Toronto, ON · FCP
Full-time
Provides market risk oversight, monitoring, and reporting for a designated portfolio. Develops and monitors the market risk management framework that includes the governance framework and…
Analyste en conformité commerce internationale /Trade Compliance Associate Analyst
Bell Flight
Mirabel, QC
Full-time
Le service de conformité commerciale internationale de Bell recherche un candidat innovant, doté d'un esprit analytique et d'une vision internationale pour rejoindre notre équipe en tant…
Analyste en conformité commerce internationale /Trade Compliance Associate Analyst
Textron
Mirabel, QC
Full-time
Le service de conformité commerciale internationale de Bell recherche un candidat innovant, doté d'un esprit analytique et d'une vision internationale pour rejoindre notre équipe en tant…

Benevity

GRC Analyst

Canada

Posting language: English
Posted: May 13, 2026

Apply About employer

Applications open in a new tab.

Original job description

Meet Benevity

Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

High-Level Overview

Benevity is seeking a Governance, Risk & Compliance (GRC) Analyst to support and grow our security governance, risk, privacy, and regulatory program. In this role, you will contribute to the execution of Benevity’s GRC program by supporting compliance activities, assisting with risk assessments, contributing to third-party risk management, responding to client due diligence requests, and helping maintain the policies and controls that strengthen trust with our clients, partners, and stakeholders.

Working alongside experienced GRC professionals, you will build your skills in information security, compliance, and risk management while helping ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements. This is a hands-on role with significant learning and growth opportunities across governance, risk, audit, and privacy domains.

What you'll do:

Governance & Policy

Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
Support policy exception management, attestation processes, and identify opportunities for process improvement.

Risk Management

Assist with enterprise risk assessments, including vendor and process-level reviews.
Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning.
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.

Compliance & Audit

Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
Assist with evidence gathering, control validation, and auditor engagement.
Leverage GRC platforms to support audit, privacy, and compliance workflows.

Client Support & Sales Enablement

Support the sales process by responding to client inquiries related to security, privacy, and compliance.
Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
Partner with sales and client success teams to provide timely, accurate responses that build client trust.

Privacy and Regulatory

Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations.
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory & Awareness

Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives.
Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership.
Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations.
Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.

What you'll bring:

2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment. (For a Junior GRC Analyst, we welcome candidates with 0–2 years of experience, including relevant internship, co-op, or academic project experience.)
Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA.
Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to support policy, risk, audit, privacy, and vendor risk workflows.
Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering.
Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders.
Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving.
An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus.
Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.

Discover your purpose at work

We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more …

Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.

If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become …

It’s time to join Benevity. We’re so excited to meet you.

Where We Work

At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there’s no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.

Join a company where DEIB isn’t a buzzword

Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily - from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams.

We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine.

That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity.

Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to [email protected].

Apply About employer

More about this job

Responsibilities

Support the execution of the GRC program by managing security policies, conducting risk assessments, and overseeing third-party risk management. Assist with audit readiness and respond to client security questionnaires to enable sales and build trust.

Requirements

Requires 2-4 years of experience in cybersecurity, GRC, or privacy, with a working knowledge of global regulatory frameworks. Experience with GRC tooling and the ability to communicate complex security concepts to stakeholders is essential.

Skills

Governance Risk and Compliance
ISO 27001
SOC 2
NIST
PCI DSS
GDPR
PIPEDA
FINTRAC
Third-Party Risk Management
Privacy Law Compliance
Audit Readiness
Risk Assessment

Visa sponsorship

Not detected in the job text

Keywords

GRC
ISO 27001
SOC 2
NIST
PCI DSS
GDPR
PIPEDA
FINTRAC
CCPA
CPRA
OneTrust
Hyperproof
SecurityPal
AuditBoard
Drata
SaaS
TPRM
AML
ATF
Security+
CISM
CISA
CRISC
CIPM
CIPP
Risk Register
Evidence Gathering
Security Awareness
Phishing Simulations
Data Governance

Report this job