Find work in Canada.

613,723 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 13 mins ago
Finance Manager, Investments
Westerkirk
Victoria, BC
Audit, Tax and Regulatory Coordination Lead audit and review engagements for the Investment Accounting function. Work with the Director of Tax and external advisors on tax and information…
Added 28 mins ago
M
Information Protection Senior Analyst
McKesson
Mississauga, ON
- Full-time
Support regulatory and compliance requirements including HIPAA, HITRUST, GDPR, PCI-DSS, and SOX.
Added 28 mins ago
CM
Junior Analyst, Clean Fuel Regulations & Data (Toronto)
ClearBlue Markets
Toronto, ON
- Full-time
We are looking for a motivated, detail-oriented Junior Analyst to join our team, focusing on Canada's Clean Fuel Regulations (CFR), data analytics, and our proprietary project optimization…
Added 43 mins ago
TR
Senior Financial Analyst, Financial Reporting
Torex Resources Inc
Toronto, ON
- Full-time
Reporting to the Corporate Controller, the Senior Financial Analyst, Financial Reporting is responsible for the end-to-end preparation of Torex’s quarterly and annual consolidated financial…
Added 43 mins ago
DI
Business System Analyst( Payroll)
Dawn InfoTek
Toronto, ON
- Contract
We are currently seeking a Junior BSA( Payroll Analyst) to join our dynamic team and support one of our major banking clients.
Added 58 mins ago
WF
Security Analyst, GRC
West Fraser
Vancouver, BC
- Full-time
We’re seeking a Security Analyst, GRC to join our IT Security team in Vancouver, BC and help strengthen our cybersecurity posture through Governance, Risk & Compliance.
Added 1 hour ago
Senior Business Process Analyst
iGaming Ontario
Toronto, ON
iGaming Ontario is hiring a Senior Business Process Analyst. Reporting to the Senior Manager, Program Delivery, the successful candidate will play a key role in advancing large-scale…
Added 1 hour ago
T
Senior Business Analyst, Easy Trade
TD
Toronto, ON
- Full-time
The Senior Business Analyst, Direct Investing, is responsible for leading the analysis, documentation, and management of business requirements for initiatives that directly impact TD’s…
Added 1 hour ago
M
Analyst, Trade Advisory Group
MNP
Montreal, QC
- Full-time
Make an impact with our Trade Advisory Group as an Analyst. This team of professionals offers expanded scope of fiscal and regulatory advisory services for clients engaged in the import and…
Added 1 hour ago
NA
FINANCIAL MANAGEMENT ANALYST
Naval Air Warfare Center Training Systems Division (NAWCTSD)
Cherry Point, AB
- Full-time
You will perform complex work involving multiple accounting and financial systems to ensure audit readiness and full regulatory compliance.
Added 1 hour ago
PC
Business Credit Analyst
Prospera Credit Union
Surrey, BC
- Full-time
Stay informed of regulatory, policy and procedural requirements to ensure compliance and keep well informed of market/economic conditions as it relates to assessing and analyzing credit…
Added 1 hour ago
SG
Summer intern, Financial Risk Analytics Product
S&P Global
Toronto, ON
- Full-time
…measure and manage their counterparty credit risk, market risk, regulatory risk capital, and derivative valuation adjustments…
Added 2 hours ago
TS
IT Asset Management Analyst
The Salvation Army in Canada
Toronto, ON
- Contract
Coordinate software license compliance activities, audits, and validations to mitigate risk and ensure adherence to contractual and regulatory obligations.
Added 2 hours ago
Client Scam Intervention Specialist | Evening Shift (2:00 PM-10:00 PM)
Scotiabank
Toronto, ON · Scarborough, ON
…with clients who may be under the influence of a scammer. The analyst uses empathy, active listening, sound judgment, and persuasive communication to help clients recognize manipulation,…
Added 2 hours ago
SG
Summer intern, Financial Risk Analytics Product
S&P Global
Toronto, ON
- Full-time
…measure and manage their counterparty credit risk, market risk, regulatory risk capital, and derivative valuation adjustments…
Added 3 hours ago
CI
Senior Azure Cloud Administrator - Contract
Compugen Inc
Calgary, AB
- Contract
Collaborate with cybersecurity teams to ensure compliance with organizational security policies and regulatory requirements.
Added 3 hours ago
T
Business Information Management Analyst II
TD
Toronto, ON
- Full-time
Business Management Analyst to provide dedicated support for centralized Business Management functions across Infrastructure & Engineering (I&E). The role will support a growing portfolio…
Added 3 hours ago
C
Analyst, Business Transformation (11 Months Fixed Term Contract/Secondment)
CIBC
Toronto, ON
- Full-time
You can demonstrate experience. In business analyst (BA), project management, and/or regulatory compliance role. You have knowledge of the practices, procedures and principles of project…
Added 3 hours ago
T
Business Information Management Analyst II
TD
Toronto, ON
- Full-time
Business Management Analyst to provide dedicated support for centralized Business Management functions across Infrastructure & Engineering (I&E). The role will support a growing portfolio…
Added 3 hours ago
T
Modelling/Forecasting Analyst
TD
Toronto, ON
- Full-time
…model risk policy, adhere to industry best practices, and meet regulatory…
Added 4 hours ago
BR
Data Quality Analyst
Benchmark Recruitment
Vancouver, BC · Greater Vancouver Metropolitan Area
- Contract
Job Title: Data Quality Analyst – Data Strategy
Added 4 hours ago
CE
Financial Reporting Analyst
Canlin Energy Corporation
Calgary, AB
- Full-time
Reporting to the Manager, Financial Reporting & Operations Finance, the Financial Reporting Analyst will play a key role in the Company's financial reporting and accounting functions. This…
Added 4 hours ago
M
Senior Analyst, Transfer Pricing
MNP
Toronto, ON
- Full-time
Make an impact with our Transfer Pricing team as a Senior Analyst. This diverse team of professionals delivers customized tax strategies within a complex and dynamic regulatory framework.…
Added 5 hours ago
TS
IT Asset Management Analyst
The Salvation Army in Canada
Toronto, ON
- Contract
Coordinate software license compliance activities, audits, and validations to mitigate risk and ensure adherence to contractual and regulatory obligations.
Added 5 hours ago
TS
IT Asset Management Analyst
The Salvation Army in Canada
Toronto, ON · Greater Toronto Area, Canada
- Contract
Coordinate software license compliance activities, audits, and validations to mitigate risk and ensure adherence to contractual and regulatory obligations.

West Fraser

Security Analyst, GRC

Vancouver, BC, V6C 3E8, Canada

The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location. · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location.
Job type: Full-time
Posting language: English
Posted: Nov 6, 2026

Original job description

We’re seeking a Security Analyst, GRC to join our IT Security team in Vancouver, BC and help strengthen our cybersecurity posture through Governance, Risk & Compliance.

As a member of West Fraser’s Cyber Security team, you will play a critical role in ensuring that this information is secure while enabling technology and business partners to innovate, drive sales, and safely maintain operations throughout our facilities.

The Security Specialist, GRC, takes ownership of assigned workstreams and executes them from start to finish, provides input and feedback to shape requirements and approach, and carries out much of the day-to-day operational work. Areas of focus include SOX IT compliance, security and third-party risk management, attack surface governance, security policies and standards, security awareness and phishing simulations, and GRC reporting, in alignment with regulatory requirements and the NIST Cybersecurity Framework.

This position is instrumental in protecting our organization from the ever-evolving cyber threat landscape and operates under the direct supervision of the Principal Architect, Governance, Risk & Compliance.

You'll Do:

SOX IT Compliance

Own the execution of assigned IT general controls (ITGC) activities (e.g., user access reviews, change management reviews) to support SOX requirements for the confidentiality and integrity of financial data, including scheduling, coordinating with control owners, and driving remediation of exceptions to closure.
Prepare and maintain audit evidence, and act as the day-to-day contact for internal and external audit requests on assigned controls.

Security Risk Management

Conduct security risk assessments for assigned areas and maintain the risk register (risk owners, treatment plans, risk acceptances); track and report on remediation progress.
Third-party risk: Own the execution of vendor security reviews (intake, risk tiering, due diligence) using security questionnaires, SOC 2 and ISO 27001 reports, and other assurance evidence; track vendor remediation and periodic reassessments, work with Procurement and Legal on contractual security requirements, and recommend process improvements.
Attack surface: Implement the standards and ownership model for discovering, inventorying, and risk-rating internet-facing and internal assets, and maintain the supporting inventory data; provide input on approach and tooling.
Attack surface: Track exposures (unmanaged assets, exposed services, misconfigurations, unpatched vulnerabilities) and drive remediation timelines with Infrastructure, Network, and Security Operations; prepare exception requests for review through the risk process.

Policy, GRC Systems and Reporting

Administer day-to-day operation of the GRC platform used to manage risks, controls, policies, exceptions, and third-party assessments, and implement configuration changes and enhancements as requirements are defined.
Produce and maintain cybersecurity metrics and key risk indicators (e.g., SOX control status, risk treatment, third-party risk, attack surface exposure, phishing results) for management reporting.

Security Awareness and Phishing Simulations

Develop and deliver security awareness training across the organization, using a variety of formats to maximize engagement.
Plan and run regular phishing simulations based on current threat trends, analyze results, and coordinate follow-up training for employees who fall for them.

You Have:

Minimum of 2 years of experience in Governance, Risk and Compliance, IT audit/assurance, ITGC control execution or support (e.g., access or change management), or third-party risk management.
Bachelor’s degree in information security, Computer Science, or a related field, or equivalent direct work experience.
Relevant certifications preferred (e.g., CRISC, CISA, CISM, CISSP).
Working knowledge of risk management and control frameworks (e.g., NIST CSF, ISO 27001, COBIT, SOX ITGC).
Experience with security awareness training and phishing simulations; familiarity with third-party risk assessment and vulnerability/attack surface management concepts.
Experience with GRC platforms (e.g., ServiceNow IRM, Archer, OneTrust) is an asset.
Excellent communication skills, with the ability to present technical concepts to non-technical audiences and to raise ideas and concerns proactively.
Ability to take ownership of assigned work and deliver within defined requirements; strong attention to detail and organization, with the ability to manage recurring tasks and deadlines.

Compensation Package:

The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location.
Annual bonus opportunity
Outstanding benefits package including medical, dental, pension, life insurance, disability, accident insurance, vacation, and holidays

Your Workplace Location:

Nestled amidst captivating natural beauty, Vancouver is a city that promises an enchanting experience to its visitors. Its balmy climate, coupled with the warm hospitality of its people, has earned it a reputation as one of the most sought-after tourist destinations in the world. However, Vancouver's appeal doesn't just end there. The city boasts a vibrant cultural scene, with a rich diversity of languages and ethnicities, adding to its unique charm. As one of Canada's most ethnically and linguistically diverse cities, Vancouver is a melting pot of cultures, traditions, and lifestyles, making it an unparalleled place to live.

About Us:

West Fraser offers exciting career paths in trades, operations, professional services, engineering and forestry across more than 50 locations in Canada, the U.S., the U.K. and Europe.

From lumber to engineered wood products, West Fraser delivers high-quality, naturally renewable building materials to the world. In all aspects of our business, we’re committed to responsible product sourcing and harvesting practices, backed by globally-recognized forest certifications.

Diversity:

At West Fraser, we strongly believe promoting diversity and inclusion is essential to our success. Our commitment to creating inclusive workplaces is reflected in our core values, and we constantly strive to foster a culture that values and respects every individual’s unique background and perspective. By joining us, you will have the opportunity to be a part of a team dedicated to shaping a brighter future by embracing diversity and promoting inclusivity. Join our team at West Fraser and help us build a more diverse and inclusive community.

Sustainability:

West Fraser is fully committed to sustainable forest management as defined in our environmental policy, which is reflected in every aspect of our work. We adopt new technologies and innovations to create exceptional building materials. Wood products are a natural, renewable, recyclable, and environmentally sustainable choice for consumers who prioritize sustainability.

Sustainability Report | West Fraser

Learn more about us!

We are West Fraser

Apply About employer

More about this job

Responsibilities

The Security Analyst will manage IT general controls, conduct security risk assessments, and oversee third-party vendor security reviews. Additionally, they will administer GRC platforms, produce cybersecurity metrics, and lead security awareness training and phishing simulations.

Requirements

Candidates must have at least 2 years of experience in GRC, IT audit, or ITGC control execution. A bachelor's degree in information security, computer science, or a related field is required, along with strong organizational and communication skills.

Skills

Governance
Risk management
Compliance
SOX IT compliance
ITGC
Third-party risk management
Vulnerability management
Security awareness
Phishing simulations
NIST Cybersecurity Framework
GRC reporting
Audit evidence
Security policies
Communication skills
Technical presentation

Benefits

Medical
Dental
Pension
Life insurance
Disability insurance
Accident insurance
Vacation
Holidays
Annual bonus

Visa sponsorship

Not detected in the job text

Keywords

Governance
Risk
Compliance
GRC
SOX
ITGC
NIST CSF
ISO 27001
COBIT
ServiceNow IRM
Archer
OneTrust
CRISC
CISA
CISM
CISSP
Cybersecurity
Vendor risk management
Attack surface governance
Phishing simulations
Security awareness
Risk register
Audit
Information security
Computer science

Report this job