Find work in Canada.

318,293 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 4 months ago
SW
EPMO Project Analyst
Saskatchewan Workers' Compensation Board
Bratt's Lake No. 129, Saskatchewan · Regina, SK
- Full-time
As part of the Enterprise PMO, the Project Analyst will assist the Manager, EPMO Support Services in defining and implementing project management processes, standards and best practices.…
Added 4 months ago
HA
Sr Materials Mgmt Analyst
Honeywell Aerospace
Mississauga, ON
- Full-time
As a Sr Materials Management Analyst here at Honeywell, you will be supporting globally across the supply chain network to gather and manage information about our businesses' capacity to…
Added 4 months ago
PMO Manager
Bulk Barn
Aurora, Ontario
The PMO Manager is responsible for creating, defining and maintaining standards for project management within the organization. This incumbent ensures effective source documentation,…
Added 4 months ago
JI
Intermediate Integrated Logistics Support Analyst
J.D. Irving, Limited
Halifax, NS
- Full-time
Fleetway is hiring an Intermediate Integrated Logistics Support (ILS) Analyst to help shape the future of Canada’s naval fleet. In this role, you’ll support the development of maintenance…
Added 4 months ago
IL
Sr. Analyst, Privileged Access Management
Invesco Ltd.
Charlottetown, Prince Edward Island
- Full-time
…Transformation. Invesco’s Privileged Access Management (PAM) program aims to prioritize the protection of the most critical assets and applications by establishing efficient, scalable…
Added 4 months ago
JI
Senior Integrated Logistics Support Analyst
J.D. Irving, Limited
Halifax, NS
- Full-time
…customers, while overseeing ILS-related quality assurance and control…
Added 4 months ago
W
Senior Product & Strategy Analyst, Affinity
WTW
Toronto, ON
- $80,000 to $100,000 CAD / year
- Full-time
…providers, etc. We work with these clients to develop and optimize program strategies, insurance products and coverages, and customer experience to help drive their core business and growth…
Added 4 months ago
GRC Analyst
Benevity
Vancouver, British Columbia
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Added 4 months ago
GRC Analyst
Benevity
Toronto, Ontario
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Added 4 months ago
GRC Analyst
Benevity
Calgary, Alberta
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Added 4 months ago
GRC Analyst
Benevity
Canada
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Added 4 months ago
Senior GRC Analyst
Benevity
Calgary, Alberta · Vancouver, British Columbia · Toronto, Ontario
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Added 5 months ago
T
Circuit Analyst
TechInsights
Ottawa, Ontario
- Full-time
A self-starter mindset with the ability to proactively identify risks and areas of concern related to project timelines and scope
Added 5 months ago
II
Senior Security Engineer
Intega IT
Ottawa, Ontario
- Full-time
Security Control Implementation & Optimization
Added 5 months ago
JI
Integrated Logistics Support Analyst
J.D. Irving, Limited
Halifax, NS
- Full-time
Working closely with engineering, program, and service delivery teams, you will perform and review Logistic Support Analysis (LSA) and Availability, Reliability, and Maintainability (AR and…
Added 5 months ago
Senior Cyber Security Analyst (Temporary)
First West
Langley (District), BC · Langley, BC
Working understanding of the following control and program frameworks: NIST Cyber Security Framework, OWASP Top 10, and CIS Critical Security Control
Added 5 months ago
AA
Analyste – Gestion de la Configuration/Configuration Management Analyst
Aviya Aerospace Systems
Longueuil, Quebec
- Full-time
…Aerospace and Defense applications. Aviya provides expertise in program management, systems, software, mechanical, and hardware engineering to many of the top-tier Aerospace and Defense…
Added 1 month ago
Senior Analyst, IT Quality Applications
PowerCo SE
St. Thomas, Ontario
The Senior Analyst, IT Quality role is the designated IT system owner for all Quality-related applications supporting PowerCo Canada’s battery cell manufacturing operations. This role…
Added 5 months ago
EB
Commercial Account Manager, Portfolio Management, Commercial Finance Group (CFG)
EQ Bank | Canada's Challenger Bank
Toronto, Ontario
- Full-time
…policies and underwriting standards and meet compliance and control requirements. Additionally, the incumbent will be responsible for monitoring risks associated with their commercial…
Added 5 months ago
K
Project Manager - 12 month Contract
KUBRA
Mississauga, Ontario
- Contract
Monitor and control project performance by tracking progress against scope, schedule, and budget, proactively identifying risks and issues, driving mitigation plans, and managing change…
Added 2 months ago
LC
Senior Analyst, Enterprise Risk Management, Risk Advisory Services
Loblaw Companies Limited
Brampton, Ontario
- Full-time
The RAS team plays an important role by building a world-class program to support our businesses in meeting their strategic plans through fostering a practical and disciplined risk…
Added 1 month ago
Cybersecurity Compliance Analyst
PCL Construction
Edmonton, AB
As a Cybersecurity Compliance Analyst for PCL Constructors Inc. in Edmonton, Alberta (Corporate), you'll have the opportunity to play a key role in developing, implementing, and supporting…
Added 5 months ago
Analyst, Strategy, Governance and project control
Bombardier
Montreal, Quebec · St-Laurent, Québ
Job Analyst, Strategy, Governance and project control
Added 3 months ago
A
Senior OT Cyber Security Analyst/Engineer
Alithya
Pickering, ON
- Full-time
Experience with OPG or Bruce Power Engineering Change Control (ECC), consulting with and guiding clients, presenting and delivering cyber security training, and estimating project effort…

No more jobs.

Benevity

GRC Analyst

Calgary, AB, Canada

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: May 13, 2026

Original job description

Meet Benevity

Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!

High-Level Overview

Benevity is seeking a Governance, Risk & Compliance (GRC) Analyst to support and grow our security governance, risk, privacy, and regulatory program. In this role, you will contribute to the execution of Benevity’s GRC program by supporting compliance activities, assisting with risk assessments, contributing to third-party risk management, responding to client due diligence requests, and helping maintain the policies and controls that strengthen trust with our clients, partners, and stakeholders.

Working alongside experienced GRC professionals, you will build your skills in information security, compliance, and risk management while helping ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements. This is a hands-on role with significant learning and growth opportunities across governance, risk, audit, and privacy domains.

What you'll do:

Governance & Policy

Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
Support policy exception management, attestation processes, and identify opportunities for process improvement.

Risk Management

Assist with enterprise risk assessments, including vendor and process-level reviews.
Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning.
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.

Compliance & Audit

Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
Assist with evidence gathering, control validation, and auditor engagement.
Leverage GRC platforms to support audit, privacy, and compliance workflows.

Client Support & Sales Enablement

Support the sales process by responding to client inquiries related to security, privacy, and compliance.
Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
Partner with sales and client success teams to provide timely, accurate responses that build client trust.

Privacy and Regulatory

Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations.
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory & Awareness

Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives.
Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership.
Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations.
Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.

What you'll bring:

2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment. (For a Junior GRC Analyst, we welcome candidates with 0–2 years of experience, including relevant internship, co-op, or academic project experience.)
Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA.
Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to support policy, risk, audit, privacy, and vendor risk workflows.
Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering.
Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders.
Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving.
An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus.
Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.

Discover your purpose at work

We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more …

Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.

If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become …

It’s time to join Benevity. We’re so excited to meet you.

Where We Work

At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there’s no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.

Join a company where DEIB isn’t a buzzword

Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily - from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams.

We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine.

That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity.

Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to accommodations@benevity.com.

Apply About employer

More about this job

Responsibilities

The GRC Analyst supports the security governance, risk, and privacy program by maintaining policies and conducting risk assessments. They also handle audit readiness, respond to client security questionnaires, and ensure compliance with global regulatory frameworks.

Requirements

Requires 2-4 years of experience in cybersecurity GRC or privacy, ideally within a SaaS environment. Candidates should have working knowledge of frameworks like ISO 27001 and GDPR, and experience with GRC tools is preferred.

Skills

Governance Risk and Compliance
ISO 27001
SOC 2
NIST
PCI DSS
GDPR
PIPEDA
FINTRAC
Third-Party Risk Management
Risk Assessment
Privacy Law Compliance
Audit Readiness
Client Due Diligence
Security Questionnaires
GRC Tooling
Security Awareness Training

Visa sponsorship

Not detected in the job text

Keywords

GRC
ISO 27001
SOC 2
NIST
PCI DSS
GDPR
PIPEDA
FINTRAC
CCPA
CPRA
OneTrust
Hyperproof
SecurityPal
AuditBoard
Drata
TPRM
AML
ATF
Security+
CISM
CISA
CRISC
CIPM
CIPP
SaaS
Risk Register
Evidence Gathering
Phishing Simulations
Data Governance
Information Security

Report this job