Senior Compliance Consultant strengthening Sun Life’s Canadian disability - management governance and risk controls. Leading audits, risk validation, business continuity, and compliance initiatives for Group Disability.
About the role
- GRC Engineer automating SOC 2, HIPAA, and vendor compliance for Clerk’s developer identity infrastructure. Building integrations, continuous controls, and audit-ready evidence workflows.
Responsibilities
- Own SOC 2 Type II and HIPAA end to end, including scoping, control design, evidence, auditor walkthroughs, and remediation
- Scope and lead the next compliance framework, likely ISO 27001, based on customer requirements
- Build and maintain integrations feeding the GRC platform from cloud providers, SaaS tools, and internal systems
- Convert controls into continuous checks using policy-as-code, configuration drift detection, and a control-failure pipeline
- Run the vendor security review program from intake through periodic re-review
- Own the security questionnaire and trust center workflow
- Maintain the risk register and conduct risk assessments producing documented decisions
- Embed compliance requirements into the SDLC and change management through tooling
- Reduce manual work required to pass quarterly audits
Requirements
- 5+ years in security, with demonstrated experience building automation for a GRC or compliance program
- Technical ownership of at least one SOC 2 Type II or ISO 27001 audit
- Ability to write code and use LLMs productively without lowering quality
- Hands-on experience with a GRC platform's API
- Cloud IAM and configuration expertise on at least one provider; GCP preferred
- Ability to determine sufficient evidence and defend an automated test to an auditor
- Ability to scope, prioritize, and ship independently in a small security engineering team
- Strong writing skills for policies, control narratives, and questionnaire answers
- Experience at an all-remote company is a nice-to-have
- Production experience shipping LLM or agentic workflows for compliance work is a nice-to-have
- Experience at a developer-tools company is a nice-to-have
Benefits
- Competitive salary
- Stock option plan / equity ownership
- Top-tier health insurance
- Home office equipment of choice
- Unlimited vacation policy; recommendation of 25 days per year
- National holidays specific to country of residence
- Diverse and inclusive globally distributed team
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Regulatory intelligence leader monitoring global rules for Telix Pharmaceuticals, a precision radiopharmaceutical company. Translating regulatory developments into strategies, communications, and cross - functional actions.
Regulatory CMC Consultant guiding small - molecule submissions and Veeva RIM activities. Supporting Syneos Health’s integrated life - sciences and drug - development services.
Conseiller conformité senior chez PEAK, chef de file canadien du conseil financier indépendant. Gestion des enjeux réglementaires complexes et amélioration du programme de conformité.
Compliance risk manager executing enterprise regulatory assessments at TD, a major North American bank. Supporting governance, quality controls, reporting, and risk - based recommendations.
Compliance and controls intern supporting iA Financial Group’s insurance regulatory activities. Testing controls, researching regulations, and preparing Power BI reports and management presentations.
Insurance compliance lead overseeing regulatory complaints, carrier audits, and escalation operations. Jerry’s AI - powered car - insurance app serves over 5 million customers.
Compliance Manager investigating regulatory complaints for RBC mutual funds. Analyzing CIRO requirements, documenting findings, and supporting complaint resolution.
Senior Compliance Analyst transforming regulatory risk assessment data into dashboards and management insights. Supporting TD’s enterprise compliance risk oversight as a major North American bank.
Marketing governance associate reviewing TDAM investment communications for regulatory compliance. Supporting surveillance, testing, reporting, and compliant content across retail and institutional channels.