Find work in Canada.

A simpler way to find your next job.

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 hour ago
Student Business Analyst/Land Negotiator
Ovintiv
Calgary, AB
Full-time
As a Business Analyst intern on the Land Negotiation team at Ovintiv you will have the opportunity to interact with various internal teams and external partners, learn about North American…
Added 5 hours ago
Summer 2027 College Internship - Source Career Field
University of Alaska Fairbanks Petroleum Engineering
Field, BC
Volunteer
…International Studies, Anthropology, or Linguistics. As an intern in the Source career field, you will be at the center of the GEOINT enterprise, collaborating with a diverse set of…
Added 10 hours ago
Career Opportunity: Risk and Compliance Officer at Selcom Microfinance Bank
Vedastus Watosha
AB
Volunteer
…application email . Do not send your CVs or job applications to our business…
Added 1 day ago
Wealth Management - Finance Internship-Co-op - Winter 2027
Scotiabank
Toronto, ON
…gain hands-on experience and contribute meaningfully to the business. This job posting covers multiple roles across various teams, allowing applicants to be considered for several positions…
Added 1 day ago
Intern Analyst, Pension Operations (January 2027 - April 2027)
University Pension Plan
Toronto, ON
We are actively recruiting for an Intern Analyst, Pension Operations roles to join our team in Winter 2027, for a 4-month or 8-month internship. The Intern Analyst is responsible for…
Added 1 day ago
Actuarial Analyst, Winter 2027 (Co-op/Internship) - 4 months
BMO
Toronto, ON · YNG
Full-time
As a co-op/intern student at BMO, you will have the opportunity to be heard, keep growing and make a difference. You will be part of our campus program to gain the skills and knowledge…
Added 1 day ago
Network Analyst Student - Winter 2027
J.D. Irving, Limited
Saint John, NB
Full-time
Join our IT Networking team as an Intern and gain hands-on experience supporting enterprise-level network infrastructure. This internship offers a unique opportunity to work alongside…
Added 2 days ago
Mergers and Acquisitions Business Development Analyst
ZenaTech Inc.
Toronto, ON
Full-time
Having experience as an intern/co-op or full-time in Sales, Corporate Development, or Business Development would be an asset
Added 2 days ago
Data Analytics Intern (8 months)
Super.com
Remote, Canada
$20.25 to $39.25 CAD / hour
Internship · Remote
We are looking for a Data Analytics Intern to join our growing data team for the Winter 2026 term. As a Data Analyst Intern at Super, you will be responsible for using data to answer…
Added 2 days ago
Intern - IT Analyst
iA Financial Group (Industrial Alliance)
Quebec, QC
Internship
…clients feel confident and secure about their future? As an Intern - IT Analyst, you will play a key role in delivering and improving technology solutions in collaboration with various…
Added 2 days ago
Analyst Intern - Technical Services (16 months)
Kinross Gold Corporation
Toronto, ON
Full-time
The analyst intern will support current business needs, which may vary over the course of the internship. A successful intern should be flexible and eager to take on new and different tasks…
Added 2 days ago
Analyst Intern - Sustainability Engineering (18 months)
Kinross Gold Corporation
Toronto, ON
Full-time
In this role, our Analyst Intern - Sustainability Engineering will:
Added 2 days ago
Security Analyst Student/ Intern - Winter 2027
J.D. Irving, Limited
Saint John, NB
Full-time
The Co-op Student will work with a dynamic team of IT professionals within JDI IT as an IT Cyber Security Analyst. The successful candidate will be given increasingly challenging…
Added 2 days ago
Junior Accountant, Coop/Intern
North Horizon
Toronto, ON
$25 CAD / hour
…expose to full accounting cycle and assist the senior financial analyst on recording business transactions and analyzing business…
Added 2 days ago
Junior Accountant, Coop/Intern
North Horizon Holdings Inc.
Toronto, ON · North York, ON
$25 CAD / hour
Internship
…expose to full accounting cycle and assist the senior financial analyst on recording business transactions and analyzing business…
Added 2 days ago
Logistics Analyst Intern
Pembina Pipeline Corporation
Calgary, AB
Pembina Pipeline’s Commercial Teams are currently hiring for a Logistics Analyst Intern working in our Calgary corporate office. The Analyst will collaborate with an experienced team of…
Added 3 days ago
Functions - Internal Audit, Summer Analyst - Mississauga, ON 2027
Citi
Mississauga, ON
Full-time
Citi’s Internal Audit Summer Analyst Program is a 16-week internship opportunity in Mississauga, ON. This Program will provide development-focused opportunities coupled with structured…
Added 3 days ago
Senior GRC Analyst - Central or Eastern time, US or Canada
Shift Technology
Toronto, ON
Identify key risk areas in collaboration with engineering and business teams and facilitate security control evaluations and testing.
Added 3 days ago
Early Careers: Intern Conversion Only - Corporate Risk and Broking (CRB) Graduate Development Program Analyst – Broking Placement – Toronto 2027
WTW
Toronto, ON
$65,000 to $70,000 CAD / year
Full-time
…having the opportunity to deep dive within their respective business…
Added 3 days ago
Intern, Full Stack Software Engineer - Team Pickle - Winter 2027
Capital One
Toronto, ON
Full-time
161 Bay Street (93021), Canada, Toronto,Toronto, Ontario,Intern, Full Stack Software Engineer - Team Pickle - Winter 2027
Added 3 days ago
Intern, Full Stack Software Engineer - Team Sprout - Winter 2027
Capital One
Toronto, ON
Full-time
161 Bay Street (93021), Canada, Toronto,Toronto, Ontario,Intern, Full Stack Software Engineer - Team Sprout - Winter 2027
Added 4 days ago
Intern - IT Analyst
iA Financial Group (Industrial Alliance)
Quebec, QC
Internship
…clients feel confident and secure about their future? As an Intern - IT Analyst, you will play a key role in a technology modernization environment that combines existing systems with…
Added 4 days ago
Actuarial Analyst - Winter 2027 Co-op/Intern
Definity Insurance Company
Waterloo, ON
Full-time
…develop deep knowledge of actuarial operations and the insurance business, including predictive modelling, underwriting, claims handling, product development, reserving, estimation of…
Added 4 days ago
Cyber Security Co-op/Intern – JEDI Partnership
TD
Toronto, ON
Full-time
Our Co-op/Intern Programming is offered with select Co-op and Internship roles and is designed to help you better understand the TD business, build on critical career capabilities, and…
Added 4 days ago
Cyber Security Co-op/Intern – JEDI Partnership
TD
Toronto, ON
Full-time
Our Co-op/Intern Programming is offered with select Co-op and Internship roles and is designed to help you better understand the TD business, build on critical career capabilities, and…

Shift Technology

Senior GRC Analyst - Central or Eastern time, US or Canada

Toronto, ON, Canada

Pay: $120,000 - $150,000 USD
Experience: 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role.
Posting language: English
Posted: Sep 22, 2026

Apply About employer

Applications open in a new tab.

Original job description

Shift delivers AI agents that transform insurers' most critical work. By combining deep industry expertise and unmatched data resources, Shift provides proven results that have earned the trust of hundreds of the world's leading insurers. Our insurance-grade AI is accurate, explainable, and secure - empowering human experts to move with unmatched speed, total confidence, and a renewed focus on the people they serve.

Your browser does not support the video tag.

Our culture is built on innovation, trust, and a drive to transform the insurance industry through our SaaS platform. We come from more than 50 different countries and cultures and together we are creating the future of insurance.

Learn more at www.shift-technology.com

As a Senior GRC Analyst, you will be a cornerstone of Shift’s security program, responsible for developing, maintaining, and assessing our integrated security and privacy management framework. You will manage our compliance with key industry standards, lead risk assessments, oversee our third-party security assurance program, and support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence. This role is critical for ensuring that Shift meets its regulatory obligations and maintains the trust of our customers. As part of the Information Security department, this role reports to the GRC Lead.

RESPONSIBILITIES

Governance & Policy Management

Act as a lead contact to translate Shift’s global information security expectations into actionable policies, standards, and procedures.
Promote a mind-set of security and compliance across the organization, transferring knowledge of standards and acting as a subject matter expert (SME).
Contribute to the development and support of the security awareness program to ensure it aligns with policy and compliance requirements.
Partner with the Data Protection Officer to develop and maintain privacy policies, data handling standards, and public-facing privacy notices in line with privacy laws and global regulations such as GDPR.

Risk Management & Security Assurance

Develop and maintain the security assurance plan, ensuring key controls are effectively designed and implemented to meet Shift policies and standards.
Improve the third-party information security assurance and continuous assessment process.
Identify key risk areas in collaboration with engineering and business teams and facilitate security control evaluations and testing.
Review architectural designs and new initiatives to ensure they align with security policies and effectively mitigate risk.
Proactively identify potential information security GRC problem areas and execute plans to improve the overall assurance workflow.
Support and facilitate Data Protection Impact Assessments (DPIAs) for new products and initiatives.

Compliance & Audits

Manage and coordinate internal and external audits for certifications such as ISO 27001 and SOC 2 Type II.
Perform analysis and compile documentation and evidence to demonstrate the compliance level of systems, services, and controls.
Work with internal teams to manage the remediation of audit findings and track them to closure.
Support legal and stakeholder teams in responding to Data Subject Access Requests (DSARs)

Third-Party Risk Management

Develop, execute, and improve the third-party information security assurance and continuous assessment process.
Communicate with third parties and suppliers to conduct risk assessments, review their security posture, and manage the remediation of identified issues.

SKILLS & BACKGROUND

Experience & Education

7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role.
Bachelor’s Degree in a relevant field or equivalent work experience.
Professional certifications such as CIPP/E, CIPP/US, CIPT CISA, CISM, CRISC, or CISSP are highly desirable.
Direct experience of delivery in highly regulated industries, i.e financial services, healthcare.
Direct experience managing or supporting formal audit and certification processes from start to finish.

Knowledge & Frameworks

Deep knowledge of security and privacy frameworks is required (e.g., ISO 27001, ISO27701, SOC 2 Type II, HITRUST, NIST CSF)
Strong knowledge of global privacy and healthcare regulations (e.g., GDPR, HIPAA)
Working knowledge of AI regulations, frameworks, and standards (e.g., EU AI Act, ISO 42001)
Working knowledge of business continuity, disaster recovery, and incident response planning, including plan structure, exercise and test methodologies.
Hands-on experience with modern GRC management tools, preferably Drata - connecting integrations, tuning automated evidence collection and monitoring tests, and building custom controls and frameworks.

Core Competencies

Exceptional communication and presentation skills, with the ability to translate complex compliance requirements into clear business guidance.
Strong stakeholder management skills with the ability to influence and align teams without direct authority.
Highly organized with strong project management skills, capable of managing multiple audits and assessments simultaneously.
An analytical mindset with the ability to balance regulatory requirements with business objectives and priorities.

RECRUITMENT PROCESS

First fit call with our Talent Acquisition Manager
Team fit call with the Hiring Manager
Tech round with the Team
A final interview with our CISO

The range listed is for base compensation. Your actual base salary will vary based on factors including location and individual qualifications objectively assessed during the interview process.

In addition to base salary, your total rewards package will include additional components such as incentive pay and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the specific details for this position.

Base Salary Pay Range

$120,000 - $150,000 USD

To support our permanent, full time employees at every stage of their careers and lives, we provide a competitive total rewards and benefits package. Here are the global benefits we’d like to highlight:

Flexible remote and hybrid working options
Competitive Salary and a variable component tied to personal and company performance
Multiple Learning and Development opportunities, including Focus Fridays, a half-day each month to focus on learning and personal growth
Generous PTO and paid holidays
Mental health benefits
2 MAD Days per year (Make A Difference Days for paid volunteering)

Additional benefits may be offered by country, based on your eligibility - ask your recruiter for more information. Intern and Apprentice positions may receive some of these benefits - ask your recruiter for more details.

AI tools are used to help review applications for this role. Read our AI in Recruitment Notice for what the AI considers, how to request a human review, and our most recent bias audit.

At Shift we strive to be a diverse and inclusive workforce. We welcome applications from and hire people who will contribute to the diversity of our company, without regard to race, color, religion, marital status, age, national or ethnic origin, physical or mental disability, medical condition, pregnancy, genetic information, gender identity or expression, sexual orientation, or other non-merit criteria. Shift Technology is committed to providing reasonable accommodations for qualified individuals with disabilities in our application and employment process. Should you require accommodation, please email accommodation@shift-technology.com and we will work with you to meet your accessibility needs.

Please be aware of scammers and only trust correspondence that comes from emails ending in "shift-technology.com". We will never do initial outreach to you via Whatsapp/Text/SMS, never ask for banking information or personal identification numbers (ex. Social Security Number) as part of our recruitment process.

Shift Technology does not accept unsolicited CVs from recruiters or employment agencies in response to the Shift Technology Careers page or a Shift Technology social media post. Any unsolicited CVs, including those submitted directly to hiring managers, are deemed to be the property of Shift Technology.

Apply About employer

More about this job

Responsibilities

The Senior GRC Analyst will develop and maintain the company's integrated security and privacy management framework while managing compliance with industry standards. This role involves leading risk assessments, overseeing third-party security assurance, and coordinating internal and external audits.

Requirements

Candidates must have 7+ years of experience in GRC, IT Audit, or Information Security roles along with a bachelor's degree. Strong knowledge of security frameworks like ISO 27001, SOC 2, and privacy regulations such as GDPR and HIPAA is required.

Skills

GRC
IT Audit
Security Assurance
Information Security
ISO 27001
SOC 2 Type II
Risk Management
Privacy Compliance
GDPR
HIPAA
Third-party risk management
Drata
Stakeholder management
Project management
Data protection
Audit remediation

Benefits

Flexible remote and hybrid working options
Competitive salary
Learning and development opportunities
Generous PTO
Paid holidays
Mental health benefits
Paid volunteering days

Visa sponsorship

Not detected in the job text

Keywords

GRC
ISO 27001
SOC 2 Type II
GDPR
HIPAA
Drata
Information Security
Risk Assessment
Audit
Privacy
Compliance
Third-party risk management
HITRUST
NIST CSF
ISO 42001
EU AI Act
CIPP
CISA
CISM
CRISC
CISSP
SaaS
TrustOps
Data Protection
Security Frameworks
Business Continuity
Disaster Recovery
Incident Response
DPIA
DSAR

Report this job