Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • GRC Specialist securing Miovision’s intelligent transportation technology through risk registers, audits, and compliance frameworks. Operationalizing controls across cloud, products, and enterprise systems.

Responsibilities

  • Identify, assess, and track enterprise, cyber, product, and third-party risks
  • Expand the cybersecurity risk universe
  • Maintain risk scoring, treatment plans, and evidence aligned with ISO 27001, SOC 2, and NIST
  • Drive risk remediation and manage risk acceptance workflows
  • Operate GRC programs across ISO 27001, SOC 2, and NIST
  • Map controls to eliminate duplication and improve efficiency
  • Collect and validate evidence for internal assessments
  • Manage security policy and standard lifecycles
  • Research and implement compliance process improvements
  • Build audit playbooks and practical controls
  • Support external audits and coordinate evidence submission
  • Respond to customer security questionnaires, RFPs, and due-diligence requests
  • Partner with Engineering, Cloud Ops, IT, and Product to embed risk considerations
  • Act as a risk gatekeeper for product releases and major delivery milestones
  • Drive security awareness training and risk communications
  • Champion security best practices and build company-wide security culture
  • Participate in cross-functional risk forums and working groups
  • Own key GRC components such as third-party risk or policy governance
  • Drive process automation and program maturity using AI tooling
  • Support executive reporting and strategic initiatives with the GRC Manager

Requirements

  • Experience in GRC, cyber risk, compliance, or information security, ideally within SaaS, cloud, or critical-infrastructure environments
  • Deep, practical working knowledge of at least three major frameworks, including ISO 27001, SOC 2, NIST, FedRAMP, FAIR, or COSO
  • Proficiency with modern GRC platforms
  • Hands-on ability to build and operate risk registers and control frameworks
  • Exposure to public-sector or highly regulated customers, including federal, state, municipal, or transportation agencies
  • Ability to use AI tooling effectively while identifying inaccurate outputs
  • Proactive ability to independently learn frameworks, tools, or systems
  • Strong ability to explain control gaps and drive remediation without friction

Benefits

  • Comprehensive health benefits
  • 24/7 virtual healthcare access
  • Dedicated wellness programs
  • RRSP/401K Matching Plan
  • Variable Incentive Plan
  • Mio-Days
  • Flexible vacation policy
  • Flexible work options
  • Internet subsidy
  • Remote work allowance
  • Enhanced leave for new parents
  • Equity
  • Discretionary bonus

Job title

Job type

Full Time

Experience level

Mid levelSenior

Salary

CA$90,000 - CA$115,000 per year

Degree requirement

No Education Requirement

Tech skills

CloudCyber Security

Location requirements

RemoteCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.