Closed listing
GRC Analyst
- Canada
Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Job type
- Full-time
- Experience
- 1 4 years of experience in GRC, cybersecurity, IT audit, information security, risk management, or compliance.
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
About The Role
We are looking for a GRC Analyst to support our Governance, Risk, and Compliance initiatives. This role is ideal for someone with a strong interest in cybersecurity, risk management, compliance, and information security who wants to build or advance their career in GRC.
The GRC Analyst will work closely with security, IT, audit, and business teams to support risk assessments, compliance activities, security documentation, audits, and ongoing monitoring of security controls.
Key Responsibilities
We are looking for a GRC Analyst to support our Governance, Risk, and Compliance initiatives. This role is ideal for someone with a strong interest in cybersecurity, risk management, compliance, and information security who wants to build or advance their career in GRC.
The GRC Analyst will work closely with security, IT, audit, and business teams to support risk assessments, compliance activities, security documentation, audits, and ongoing monitoring of security controls.
Key Responsibilities
- Support Governance, Risk, and Compliance (GRC) activities across the organization.
- Assist with risk assessments, security assessments, and control evaluations.
- Maintain and update security policies, procedures, standards, and compliance documentation.
- Support internal and external security audits and compliance assessments.
- Collect, review, and organize evidence for audits and regulatory requirements.
- Track remediation activities and follow up on outstanding security findings.
- Assist with third-party/vendor risk assessments and security questionnaires.
- Monitor compliance with security policies, controls, and regulatory requirements.
- Maintain risk registers, compliance trackers, and control documentation.
- Help prepare reports and dashboards related to security risks, compliance status, and audit findings.
- Work with IT and security teams to identify control gaps and document remediation plans.
- Support compliance initiatives related to frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, or similar standards.
- Stay current with changes in cybersecurity regulations, industry standards, and compliance requirements.
- 1 4 years of experience in GRC, cybersecurity, IT audit, information security, risk management, or compliance.
- Strong understanding of basic cybersecurity and information security concepts.
- Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls, or similar.
- Experience with documentation, evidence collection, compliance tracking, or audit support.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to work with technical and non-technical stakeholders.
- Strong attention to detail and organizational skills.
- Proficiency with Microsoft Excel, Word, PowerPoint, and/or Google Workspace.
- Experience with GRC platforms such as ServiceNow GRC, Archer, RSA, OneTrust, LogicGate, AuditBoard, Drata, Vanta, or similar tools.
- Knowledge of third-party/vendor risk management.
- Exposure to SOC 2, ISO 27001, PCI DSS, HIPAA, SOX, or other compliance requirements.
- Experience supporting internal or external audits.
- Familiarity with cloud security concepts, particularly AWS, Azure, or GCP.
- Certifications such as Security+, CISA, CRISC, CGRC, ISO 27001, or similar are a plus.
More about this job
Responsibilities
Support organization-wide GRC activities, including risk and security assessments, control evaluations, compliance documentation, audits, and evidence collection. Track remediation and vendor risks, monitor compliance, maintain risk and control records, and help report on security risks and audit findings.
Requirements
Requires 1–4 years of experience in GRC, cybersecurity, IT audit, information security, risk management, or compliance, along with foundational cybersecurity knowledge and familiarity with security frameworks. Candidates should have strong analytical, communication, organizational, and documentation skills; experience with GRC platforms, vendor risk, audits, cloud security, or relevant certifications is preferred.
Skills
- Governance, Risk, And Compliance
- Cybersecurity
- Risk Assessment
- Security Assessments
- Control Evaluation
- Security Documentation
- Audit Support
- Evidence Collection
- Remediation Tracking
- Third-Party Risk Management
- Compliance Monitoring
- Risk Registers
- NIST Frameworks
- ISO 27001
- SOC 2
- Microsoft Office
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Finance & Accounting
- Consulting
Keywords
- Governance, Risk, And Compliance
- Cybersecurity
- Information Security
- Risk Management
- Risk Assessments
- Security Assessments
- Control Evaluations
- Security Policies
- Compliance Documentation
- Internal Audits
- External Audits
- Evidence Collection
- Remediation Plans
- Third-Party Risk Management
- Vendor Risk Assessments
- NIST CSF
- NIST 800-53
- ISO 27001
- SOC 2
- PCI DSS
- HIPAA
- CIS Controls
- ServiceNow GRC
- Archer
- OneTrust
- LogicGate
- AuditBoard
- Drata
- Vanta
- AWS