Risk consultant developing dashboards, data insights and reporting for Sun Life’s Canadian operational - risk teams. Improving data quality, automation and leadership oversight.
About the role
- Senior GRC Analyst overseeing governance, risk, compliance, and government security for Quantexa’s data analytics platform. Supporting Canadian clearances, audits, customer assurance, and control remediation.
Responsibilities
- Support the Company Security Officer and perform responsibilities associated with the Alternate Company Security Officer function
- Support compliance with PSPC Contract Security Program and Contract Security Manual requirements
- Manage clearance requests, security briefings, security incidents and debriefings
- Review commercial and government contracts, security clauses and procurement documentation
- Identify, assess and reflect regulatory, government, contractual and customer security requirements in security controls and governance arrangements
- Monitor regulatory and government security requirements and recommend necessary changes
- Maintain, follow and implement global information security policies, standards and governance requirements
- Improve the security governance framework using audit, incident, risk assessment and regulatory findings
- Act as a named security contact for government departments, customers and security authorities
- Support customer and government security assurance activities, including due diligence, assessments, questionnaires and evidence requests
- Support third-party and supplier security risk assessments
- Maintain and improve reusable security assurance materials and evidence
- Support internal and external audits, certification activities and compliance assessments
- Track audit findings, control deficiencies and remediation activities
- Assess control effectiveness, coordinate testing and obtain compliance evidence with technical and operational teams
- Partner with Legal and Commercial teams on contractual information security requirements and associated risks
- Report on security risks, compliance obligations, control effectiveness and remediation progress to the global information security function
Requirements
- 8+ years in information security governance, risk, compliance or security assurance, across global frameworks and regulated government environments
- Experience with government security requirements personnel screening, organizational security, and contractual obligations
- A solid track record running security risk assessments, audits, control testing, and remediation
- A solid working knowledge of ISO/IEC 27001, SOC 2, NIST SP 800-53 (or equivalent) and enterprise/cloud security controls
- Strong communication skills, comfortable engaging senior stakeholders, auditors, and government representatives
- Experience operating within a global security function while owning Government specific requirements
- A strong technical communication ability with demonstrable experience of working in rapidly changing client environments
- Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders
- Experience partnering closely with Privacy and Legal teams on regulatory compliance initiatives
- Experience managing control evidence, remediation programs, and continuous compliance activities
- Strong project management and organizational skills with the ability to manage competing priorities
- Excellent written and verbal communication skills, with the ability to translate complex compliance requirements into practical business guidance
- Professional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor (nice to have)
- Prior experience in high-growth FinTech/SaaS/enterprise software environments (nice to have)
- Knowledge of privacy regulations (PIPEDA, GDPR) alongside security frameworks
- Active Government of Canada Secret (Level II) security clearance, or ability to obtain and maintain it through the Government of Canada Contract Security Program
- Successful completion of the required security screening as a condition of employment
Benefits
- Competitive salary + bonus
- 100% RRSP match up to 5%
- Competitive annual leave, plus your birthday off, parental leave, PTO, and observed holidays
- Comprehensive benefits coverage, including mental health support, fitness reimbursements, and financial well-being
- Tax-advantageous benefits, such as commuter benefits, healthcare, and dependent care
- Regularly bench-marked salary rates
- Well-being days
- Volunteer Day off
- Work from Home Equipment
- Free Subscription to a meditation, relaxation and sleep app
- Continuous Training and Development
- Spend up to 2 months working outside of your country of employment over a rolling 12-month period with our ‘Work from Anywhere’ policy
- Team Social Budget & Company-wide Socials
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior operational risk advisor at Desjardins, a financial services cooperative, managing fraud prevention, compliance, controls, and crisis risks. Leading complex strategic initiatives and advising decision - making bodies.
Business continuity lead strengthening LifeLabs’ healthcare service resilience across Canada. Managing continuity planning, cyber recovery, exercises, and operational resilience programs.
Trust and Safety Analyst investigating player reports and enforcing safety policies for thatgamecompany’s online game environments. Handling sensitive cases, illegal - harm reports, and player appeals.
Senior PSA and risk assessment engineer supporting nuclear safety, licensing, and reliability projects for Kinectrics’ nuclear utility clients. Developing probabilistic safety models, reports, and proposals.
SGI Risk Evaluator Specialist managing property valuation and loss prevention programs. Providing construction expertise, training, and technical guidance across insurance operations.
Senior Payments Risk Analyst owning fraud monitoring and risk decisions for Velora Pay. Scaling payment protection through automation, AI, and detection rules for nonprofit organizations.
Staff Fraud Risk Strategy leader owning application, transaction, and account takeover prevention. Protecting Wealthsimple's Canadian card products while balancing losses, cost, and client experience.
Head of Risk shaping fraud prevention, compliance, and scalable controls for Veem’s global payment products. Leading cross - functional risk strategy across fintech operations and payment rails.
Head of Risk shaping fraud, compliance, and secure payment controls for Veem’s global payments platform. Leading scalable risk strategy across products, markets, and payment rails.