Senior Regulatory Analyst leading complex registrant compliance reviews for Alberta’s securities regulator. Advising firms, mentoring analysts, and supporting Canadian regulatory initiatives.
About the role
- GRC Analyst supporting security governance, risk, and compliance for Benevity while fostering a culture of social good. Collaborating on compliance activities and risk assessments to align with leading standards.
Responsibilities
- Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations
- Support policy exception management, attestation processes, and identify opportunities for process improvement
- Assist with enterprise risk assessments, including vendor and process-level reviews
- Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning
- Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking
- Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks
- Assist with evidence gathering, control validation, and auditor engagement
- Leverage GRC platforms to support audit, privacy, and compliance workflows
- Support the sales process by responding to client inquiries related to security, privacy, and compliance
- Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests
- Partner with sales and client success teams to provide timely, accurate responses that build client trust
- Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others)
- Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations
- Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations
- Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly
- Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives
- Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership
- Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations
- Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture
Requirements
- 2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy
- Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA
- Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata)
- Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering
- Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM)
- Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders
- Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving
- An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus
- Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.
Benefits
- Flexible hybrid approach to work
- Opportunities for growth and development
- Commitment to diversity, equity, inclusion, and belonging
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Sun Life compliance director overseeing CIRO trade supervision and risk - based monitoring across mutual fund and securities businesses. Leading regulatory oversight, transformation, reporting, and a high - performing compliance team.
Compliance Manager advising Affirm’s consumer card program on U.S. financial regulations. Reviewing card products, marketing, disputes, and remediation for compliant growth.
Compliance Manager owning risk - based advisory for Affirm Card at Affirm, which provides transparent pay - over - time financial products. Reviewing card compliance, remediation, and regulatory requirements.
Sun Life AVP leading strategic programs, innovation, insights and regulatory operations. Integrating governance, modernization, analytics and change across Canadian wealth and insurance businesses.
Senior Compliance Associate strengthening Coinbase Canada's AML, KYC, sanctions, and FINTRAC reporting program. Managing cases, risk assessments, regulatory filings, and compliance automation for cryptocurrency operations.
Regulatory labeling manager overseeing global IMP labeling for Telix’s precision radiopharmaceuticals. Supporting clinical trials and regulatory compliance for cancer and rare - disease treatments.
Quality and compliance specialist overseeing GMP, accreditation, QMS and pharmacovigilance for Shared Health Diagnostic Services in Manitoba. Ensuring regulatory compliance across provincial healthcare sites.
Compliance officer investigating energy - sector violations for British Columbia’s energy regulator. Conducting inspections, enforcement actions, emergency response, and administrative case preparation.
Senior Compliance Consultant strengthening Sun Life’s Canadian disability - management governance and risk controls. Leading audits, risk validation, business continuity, and compliance initiatives for Group Disability.