GRC Security Analyst

Job Role:

GRC Security Analyst

Job Location:

Mississauga, Ontario, Canada Fulltime

• Evaluates and reports on the adequacy and effectiveness of system designs and controls implemented in meeting business operational and control objectives.
• Participates in discovery sessions with cross‑functional teams to identify, document, and improve the design implementation of industry‑wide compliance and controls across the organization.
• Executes in‑depth technical security and privacy assessments on several information systems across the enterprise leveraging industry frameworks.
• Executes and reports on various types of governance and assurance reviews, including post‑remediation validations.
• Conducts ongoing control risk assessments and assists in developing and executing a dynamic assurance plan to address high‑risk areas.
• Participates in compliance‑related change management initiatives within the team and across the organization.
• Supports in managing and handling complex issues with external auditors, regulators, and clients.

• 2 years of experience in governance, risk management, or compliance, including exposure to management consulting, technology industry, financial services, and/or project management.
• Knowledge of privacy and security frameworks and standards such as ISO
  27001, SOC1, SOC2, NIST, PIPEDA, GDPR, etc.
• Knowledge of industry‑accepted enterprise risk management frameworks.
• Sound understanding of IT and general application controls.
• Effective project management skills, as well as excellent verbal and written communication skills.
• Analytical capacity and experience adding structure in a complex, ambiguous environment.
• Solid cross‑group collaboration and team‑player mindset, dealing with complex problems, resolving conflicts, and influencing cross‑functionally and with executive‑level audiences.
• Ability to quickly adapt to shifting priorities, demands, and timelines through both analytical and problem‑solving capabilities.
• Ability to work under pressure with multiple teams and stakeholders.

• Bachelor's degree in Business Information Systems, Computer Science, or related field.
• Certifications such as CISA, CRISC, CISM, CISSP, or equivalent preferred.
• 2 years of directly related experience.

• BFS – Data Analysis, Risk Management (Credit/Market/IT/Ops)