GRC Specialist

📋 Description

• Identify, assess, and track enterprise, cyber, product, and third-party risks, actively expanding
• Maintain risk scoring, treatment plans, and evidence in strict alignment with frameworks like ISO
• Drive risk remediation and manage risk acceptance workflows, ensuring clear justifications and
• Drive day-to-day GRC operations across ISO 27001, SOC 2, and NIST, intelligently mapping controls
• Collect and validate rock-solid evidence for internal assessments while managing the lifecycle of
• Proactively research, recommend, and implement high-impact process improvements to streamline

🎯 Requirements

• Experience in GRC, cyber risk, compliance, or information security, ideally within SaaS, cloud, or
• Deep, practical working knowledge of at least three major frameworks (ISO 27001, SOC 2, NIST
• Ability to explain control gaps to engineers and get them fixed without causing friction.
• Proactive self-starter who has independently taught themselves new frameworks, tools, or systems to
• Highly proficient with modern GRC platforms and hands-on ability to build and operate risk
• Highly effective at using AI to speed up workflows and ensure accuracy, with judgment to spot when

🎁 Benefits

• Comprehensive health benefits, 24/7 virtual healthcare access, and dedicated wellness programs from
• RRSP/401K Matching Plan and Variable Incentive Plan.
• Unique Mio-Days and flexible vacation policy.
• Flexible work options, internet subsidy, remote work allowance, and enhanced leave for new parents.