Find work in Canada.

622,422 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 12 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 17 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 17 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 21 hours ago
BI
Environmental Health Safety Specialist
Bray International, Inc.
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
We are seeking a detail-oriented and proactive HSE Specialist to support our manufacturing operations in Montreal. Reporting to the North America HSE Manager and the Operations Manager,…
Added 22 hours ago
WH
Lead, WELLTrust Consent & Patient Experience Program
WELL Health Technologies Corp. (TSX: WELL)
Vancouver, BC
- $115,000 to $135,000 CAD / year
- Full-time
…keeping different consent types strictly separate in tracking and…
Added 22 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Montreal, QC
- Full-time
Added 22 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Montreal, QC
- Full-time
Added 23 hours ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 1 day ago
TH
Program Manager, Indigenous Health
The Hospital for Sick Children
Toronto, ON
- Full-time
…objectives, key results, performance indicators and associated reporting…
Added 1 day ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 1 day ago
PC
HES Specialist – Canada (East Region)
Parkland Corporation
Quebec, QC
- Full-time
Added 1 day ago
D|
Total Rewards Operations Analyst, M&A (Contract)
DECIEM | THE ABNORMAL BEAUTY COMPANY
Toronto, ON
- Contract
The Total Rewards Operations Specialist (M&A) is a hands-on, learning-focused contract role supporting HR-related activities related to M&A, integration, and post-integration projects. This…
Added 1 day ago
H
Civil Engineer
HDR
Richmond Hill, ON · Toronto, ON
- Full-time
…your work will directly support technological advancement, sustainability, and human experience. We bring together mechanical, electrical, structural, and civil engineering experts to solve…
Added 1 day ago
WH
Lead, WELLTrust Consent & Patient Experience Program
WELL Health Technologies Corp. (TSX: WELL)
Vancouver, BC
- $115,000 to $135,000 CAD / year
- Full-time
Report on the full consent funnel, from exposure through conversion to activation, keeping different consent types strictly separate in tracking and reporting.
Added 1 day ago
H
Sr Procurement Project Specialist
Honeywell
Markham, ON
- Full-time
As a Sr. Procurement Project Specialist supporting Public‑Private Partnership (PPP / P3) infrastructure projects in Canada, you will serve as the single point of contact (SPOC) for all…
Added 1 day ago
GE
Operational Safety Specialist
GFL Environmental Inc.
Surrey, BC
- Full-time
We are seeking a highly motivated and detail-oriented Operational Safety Specialist to join our team. In this hands-on role, you will play a critical part in protecting employee well-being,…
Added 1 day ago
V|
Logistics Specialist
Veolia | North America
Oakville, ON
- Full-time
Maintain logistics, export/import compliance and reporting databases ensuring ongoing accuracy
Added 1 day ago
C&
EHS Specialist
Cushman & Wakefield
Markham, ON
- Full-time
Reporting to Site manager, the Environmental, Health and Safety Specialist works within a facility management organization that provides a variety of O&M services that includes R&D Labs,…
Added 1 day ago
P
EHS Specialist
PPG
Cambridge, ON
- Full-time
As the EHS Specialist, you will manage a comprehensive Environmental, Health and Safety program for PPG's Sheffield, Ohio plant. The role also includes providing support to a secondary…
Added 1 day ago
T
Financial Crime Risk Specialist (5440)
TD
Toronto, ON
- Full-time
The Financial Crime Risk Specialist, Financial Crime Risk Management (FCRM) Reporting and Strategic Insights, Canada is responsible for leading strategic initiatives, process improvement,…
Added 1 day ago
GF
Sourcing Specialist
Gwillimdale Farms
Bradford West Gwillimbury, ON
- Full-time
The Sourcing Specialist leads the strategic sourcing, supplier qualification, negotiation and purchasing of maintenance, manufacturing, operational, sanitation, packaging and facility…
Added 1 day ago
WF
Security Analyst, GRC
West Fraser
Vancouver, BC
- Full-time
The Security Specialist, GRC, takes ownership of assigned workstreams and executes them from start to finish, provides input and feedback to shape requirements and approach, and carries out…
Added 1 day ago
VE
Logistics Specialist
Veolia Environnement SA
Oakville, ON
- Full-time
Maintain logistics, export/import compliance and reporting databases ensuring ongoing accuracy ● Execute and maintain SAP transactional records including inventory management (receiving,…
Added 1 day ago
WG
Dewatering Project Manager
WJ Groundwater
Toronto, ON · North York, Ontario
- Full-time
WJ Groundwater is the leading construction dewatering and groundwater specialist in the UK with operations in Canada, the Middle East, Poland & the Philippines. We have specialized plant…
Added 1 day ago
HD
Temporary Specialist - Building Performance and Asset Management , JWS (35hrs)
Halton District School Board
Burlington, ON
- Temporary
Reporting to the Manager, Building Performance Department, the Specialist, Building Performance and Asset Management will be responsible for database management, sustainability, and best…

West Fraser

Security Analyst, GRC

Vancouver, BC, V6C 3E8, Canada

The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location. · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location.
Job type: Full-time
Posting language: English
Posted: Nov 6, 2026

Original job description

We’re seeking a Security Analyst, GRC to join our IT Security team in Vancouver, BC and help strengthen our cybersecurity posture through Governance, Risk & Compliance.

As a member of West Fraser’s Cyber Security team, you will play a critical role in ensuring that this information is secure while enabling technology and business partners to innovate, drive sales, and safely maintain operations throughout our facilities.

The Security Specialist, GRC, takes ownership of assigned workstreams and executes them from start to finish, provides input and feedback to shape requirements and approach, and carries out much of the day-to-day operational work. Areas of focus include SOX IT compliance, security and third-party risk management, attack surface governance, security policies and standards, security awareness and phishing simulations, and GRC reporting, in alignment with regulatory requirements and the NIST Cybersecurity Framework.

This position is instrumental in protecting our organization from the ever-evolving cyber threat landscape and operates under the direct supervision of the Principal Architect, Governance, Risk & Compliance.

You'll Do:

SOX IT Compliance

Own the execution of assigned IT general controls (ITGC) activities (e.g., user access reviews, change management reviews) to support SOX requirements for the confidentiality and integrity of financial data, including scheduling, coordinating with control owners, and driving remediation of exceptions to closure.
Prepare and maintain audit evidence, and act as the day-to-day contact for internal and external audit requests on assigned controls.

Security Risk Management

Conduct security risk assessments for assigned areas and maintain the risk register (risk owners, treatment plans, risk acceptances); track and report on remediation progress.
Third-party risk: Own the execution of vendor security reviews (intake, risk tiering, due diligence) using security questionnaires, SOC 2 and ISO 27001 reports, and other assurance evidence; track vendor remediation and periodic reassessments, work with Procurement and Legal on contractual security requirements, and recommend process improvements.
Attack surface: Implement the standards and ownership model for discovering, inventorying, and risk-rating internet-facing and internal assets, and maintain the supporting inventory data; provide input on approach and tooling.
Attack surface: Track exposures (unmanaged assets, exposed services, misconfigurations, unpatched vulnerabilities) and drive remediation timelines with Infrastructure, Network, and Security Operations; prepare exception requests for review through the risk process.

Policy, GRC Systems and Reporting

Administer day-to-day operation of the GRC platform used to manage risks, controls, policies, exceptions, and third-party assessments, and implement configuration changes and enhancements as requirements are defined.
Produce and maintain cybersecurity metrics and key risk indicators (e.g., SOX control status, risk treatment, third-party risk, attack surface exposure, phishing results) for management reporting.

Security Awareness and Phishing Simulations

Develop and deliver security awareness training across the organization, using a variety of formats to maximize engagement.
Plan and run regular phishing simulations based on current threat trends, analyze results, and coordinate follow-up training for employees who fall for them.

You Have:

Minimum of 2 years of experience in Governance, Risk and Compliance, IT audit/assurance, ITGC control execution or support (e.g., access or change management), or third-party risk management.
Bachelor’s degree in information security, Computer Science, or a related field, or equivalent direct work experience.
Relevant certifications preferred (e.g., CRISC, CISA, CISM, CISSP).
Working knowledge of risk management and control frameworks (e.g., NIST CSF, ISO 27001, COBIT, SOX ITGC).
Experience with security awareness training and phishing simulations; familiarity with third-party risk assessment and vulnerability/attack surface management concepts.
Experience with GRC platforms (e.g., ServiceNow IRM, Archer, OneTrust) is an asset.
Excellent communication skills, with the ability to present technical concepts to non-technical audiences and to raise ideas and concerns proactively.
Ability to take ownership of assigned work and deliver within defined requirements; strong attention to detail and organization, with the ability to manage recurring tasks and deadlines.

Compensation Package:

The salary range for this position is $65,000 - $103,000 this may vary depending on experience, education, and location.
Annual bonus opportunity
Outstanding benefits package including medical, dental, pension, life insurance, disability, accident insurance, vacation, and holidays

Your Workplace Location:

Nestled amidst captivating natural beauty, Vancouver is a city that promises an enchanting experience to its visitors. Its balmy climate, coupled with the warm hospitality of its people, has earned it a reputation as one of the most sought-after tourist destinations in the world. However, Vancouver's appeal doesn't just end there. The city boasts a vibrant cultural scene, with a rich diversity of languages and ethnicities, adding to its unique charm. As one of Canada's most ethnically and linguistically diverse cities, Vancouver is a melting pot of cultures, traditions, and lifestyles, making it an unparalleled place to live.

About Us:

West Fraser offers exciting career paths in trades, operations, professional services, engineering and forestry across more than 50 locations in Canada, the U.S., the U.K. and Europe.

From lumber to engineered wood products, West Fraser delivers high-quality, naturally renewable building materials to the world. In all aspects of our business, we’re committed to responsible product sourcing and harvesting practices, backed by globally-recognized forest certifications.

Diversity:

At West Fraser, we strongly believe promoting diversity and inclusion is essential to our success. Our commitment to creating inclusive workplaces is reflected in our core values, and we constantly strive to foster a culture that values and respects every individual’s unique background and perspective. By joining us, you will have the opportunity to be a part of a team dedicated to shaping a brighter future by embracing diversity and promoting inclusivity. Join our team at West Fraser and help us build a more diverse and inclusive community.

Sustainability:

West Fraser is fully committed to sustainable forest management as defined in our environmental policy, which is reflected in every aspect of our work. We adopt new technologies and innovations to create exceptional building materials. Wood products are a natural, renewable, recyclable, and environmentally sustainable choice for consumers who prioritize sustainability.

Sustainability Report | West Fraser

Learn more about us!

We are West Fraser

Apply About employer

More about this job

Responsibilities

The Security Analyst will manage IT general controls, conduct security risk assessments, and oversee third-party vendor security reviews. Additionally, they will administer GRC platforms, produce cybersecurity metrics, and lead security awareness training and phishing simulations.

Requirements

Candidates must have at least 2 years of experience in GRC, IT audit, or ITGC control execution. A bachelor's degree in information security, computer science, or a related field is required, along with strong organizational and communication skills.

Skills

Governance
Risk management
Compliance
SOX IT compliance
ITGC
Third-party risk management
Vulnerability management
Security awareness
Phishing simulations
NIST Cybersecurity Framework
GRC reporting
Audit evidence
Security policies
Communication skills
Technical presentation

Benefits

Medical
Dental
Pension
Life insurance
Disability insurance
Accident insurance
Vacation
Holidays
Annual bonus

Visa sponsorship

Not detected in the job text

Keywords

Governance
Risk
Compliance
GRC
SOX
ITGC
NIST CSF
ISO 27001
COBIT
ServiceNow IRM
Archer
OneTrust
CRISC
CISA
CISM
CISSP
Cybersecurity
Vendor risk management
Attack surface governance
Phishing simulations
Security awareness
Risk register
Audit
Information security
Computer science

Report this job