GRC Analyst, Entry Level
- Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
Jobright is a personal AI job search agent that simplifies job searching and helps users reach better job outcomes. The entry-level GRC Analyst supports governance, risk, and compliance operations by maintaining risk and control documentation, coordinating assessments and remediation, preparing audit and security-review evidence, and tracking compliance findings.
Why Join Us
- Build real, production AI agents used by real users
- High ownership and impact
- Work at the intersection of AI, agents, and product
- Shape how people experience AI-driven job search
Responsibilities
- Maintain risk registers, control inventories, and compliance evidence
- Assist with control assessments, gap analyses, and remediation tracking
- Collect and organize evidence for audits and customer security reviews
- Help update policies, procedures, and security documentation
- Track findings, owners, due dates, and status through completion
- Prepare clear reports and collaborate with security, legal, and operations teams
Qualification
Required
- Basic understanding of governance, risk, compliance, or information security concepts
- Strong attention to detail, organization, and written communication
- Ability to interpret requirements and document evidence clearly
- Comfort working with spreadsheets, trackers, and structured review processes
- Ability to manage priorities independently in a remote environment
Preferred
- Exposure to NIST, ISO 27001, SOC 2, CIS Controls, or similar frameworks
- Internship, coursework, certification, or project experience in security, audit, or compliance
- Familiarity with GRC, ticketing, document management, or risk tracking tools
- Security+, ISO 27001 Foundation, or another entry-level certification
More about this job
Responsibilities
Maintain risk registers, control inventories, compliance evidence, and security documentation, while supporting assessments, gap analyses, audits, and customer security reviews. Track findings and remediation through completion, prepare reports, and collaborate with security, legal, and operations teams.
Requirements
Candidates should have a basic understanding of governance, risk, compliance, or information security, along with strong organization, attention to detail, and written communication skills. They should be comfortable interpreting requirements, documenting evidence, and using spreadsheets and structured review processes; familiarity with security frameworks, GRC tools, or entry-level certifications is preferred.
Skills
- Governance, Risk, And Compliance
- Information Security
- Risk Register Management
- Control Assessments
- Gap Analysis
- Remediation Tracking
- Audit Evidence Collection
- Security Reviews
- Policy And Procedure Documentation
- Compliance Reporting
- Attention To Detail
- Written Communication
- Spreadsheet Management
- NIST
- ISO 27001
- SOC 2
Benefits
- High Ownership And Impact
- Opportunity To Build Production AI Agents
- Opportunity To Shape AI-Driven Job Search
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Legal
Keywords
- Governance, Risk, And Compliance
- GRC
- Information Security
- Risk Registers
- Control Inventories
- Compliance Evidence
- Control Assessments
- Gap Analysis
- Remediation Tracking
- Audits
- Customer Security Reviews
- Policies
- Procedures
- Security Documentation
- Compliance Findings
- NIST
- ISO 27001
- SOC 2
- CIS Controls
- Security+
- GRC Tools
- Ticketing Tools
- Document Management
- Spreadsheets
- Risk Tracking