Contracts and Compliance Manager overseeing client and supplier agreements for Spiria, a Canadian custom software firm. Leading SOC 2, privacy, and government - contract compliance programs.
About the role
- GRC Analyst role at Benevity focusing on enhancing security and compliance processes. Supporting governance, risk, and regulatory programs while collaborating with technical and business teams.
Responsibilities
- Support compliance activities and compliance requests
- Assist with risk assessments and third-party risk management
- Help maintain policies and controls
- Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks
- Support audit readiness and response efforts for relevant frameworks
- Partner with sales and client success teams to provide accurate responses to client inquiries
Requirements
- 2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment
- Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA
- Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata)
- Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering
- Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM)
- Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders
- Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving
- An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus
- Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply
Benefits
- Innovative work
- Growth opportunities
- Caring co-workers
- Flexibility in work location with hybrid model
- Support for DEIB initiatives
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Sun Life Canada compliance executive overseeing regulatory risk across insurance and wealth businesses. Advising executives and boards while leading compliance programs and teams.
Senior Compliance Advisor guiding insurance and savings regulation at iA Financial Group, a Canadian insurance, savings, and wealth management company. Advising Sales teams and partners on regulatory risks, frameworks, and training.
Senior Regulatory Specialist leading mining permitting and environmental compliance projects for Ensero, an environmental consulting and remediation business. Providing regulatory direction, stakeholder engagement, and technical mentorship.
Senior GRC Analyst translating contractual and regulatory cybersecurity obligations into technical requirements. Supporting compliance, risk management, and security implementation for Telesat’s Lightspeed satellite network.
Senior GRC Analyst evaluating cybersecurity controls, privacy, and enterprise risk for Arctic Wolf’s security operations platform. Leading assurance reviews and compliance improvements across global cross - functional teams.
Compliance coordinator managing regulatory filings, audits, and consultations for AltaLink, an Alberta electricity transmission company. Maintaining compliance systems, deadlines, evidence, reporting, and regulatory risk processes.
Compliance Testing Manager evaluating controls, regulations, and risks for Sun Life Financial Canada. Developing test plans, reports, recommendations, and AI - enabled compliance improvements.
Director leading first - line risk and compliance for EQ Bank’s B2B payments, BIN sponsorship, and fintech partnerships. Building governance, controls, and teams for safe Canadian banking innovation.
Director of Compliance building consumer regulatory, privacy, and security programs for Yomali, a global e - commerce conglomerate. Leading compliance operations and advising portfolio businesses across multiple jurisdictions.