GRC Analyst role at Benevity focusing on enhancing security and compliance processes. Supporting governance, risk, and regulatory programs while collaborating with technical and business teams.
Responsibilities
Support compliance activities and compliance requests
Assist with risk assessments and third-party risk management
Help maintain policies and controls
Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks
Support audit readiness and response efforts for relevant frameworks
Partner with sales and client success teams to provide accurate responses to client inquiries
Requirements
2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment
Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA
Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata)
Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering
Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM)
Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders
Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving
An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus
Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply
Sun Life compliance director overseeing CIRO trade supervision and risk - based monitoring across mutual fund and securities businesses. Leading regulatory oversight, transformation, reporting, and a high - performing compliance team.
Compliance Manager advising Affirm’s consumer card program on U.S. financial regulations. Reviewing card products, marketing, disputes, and remediation for compliant growth.
Compliance Manager owning risk - based advisory for Affirm Card at Affirm, which provides transparent pay - over - time financial products. Reviewing card compliance, remediation, and regulatory requirements.
Sun Life AVP leading strategic programs, innovation, insights and regulatory operations. Integrating governance, modernization, analytics and change across Canadian wealth and insurance businesses.
Regulatory labeling manager overseeing global IMP labeling for Telix’s precision radiopharmaceuticals. Supporting clinical trials and regulatory compliance for cancer and rare - disease treatments.
Quality and compliance specialist overseeing GMP, accreditation, QMS and pharmacovigilance for Shared Health Diagnostic Services in Manitoba. Ensuring regulatory compliance across provincial healthcare sites.
Compliance officer investigating energy - sector violations for British Columbia’s energy regulator. Conducting inspections, enforcement actions, emergency response, and administrative case preparation.
Senior Compliance Consultant strengthening Sun Life’s Canadian disability - management governance and risk controls. Leading audits, risk validation, business continuity, and compliance initiatives for Group Disability.
Regulatory intelligence leader monitoring global rules for Telix Pharmaceuticals, a precision radiopharmaceutical company. Translating regulatory developments into strategies, communications, and cross - functional actions.