Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
About the role
- GRC Lead overseeing governance, risk, and compliance in a global organization. Managing audit engagements and compliance reporting within Sprinklr's Security GRC team.
Responsibilities
- Manage audit engagements (e.g. SOX, ISO 27001, C5 PCI-DSS, SOC 2, HIPAA), the audit request lists and ensure requests are being fulfilled appropriately by stakeholder management
- Coordinate and collate required evidence for external and internal audit support
- Managing the control and process libraries, and assisting the business in implementing internal controls
- Contribute to meetings by preparing agendas, document meeting minutes, and help track the completion of follow up
- Lead junior staff to ensure critical tasks are completed on time and per requirements
- Lead Internal/External Audits as it relates to documenting or evidencing control management practices
- Lead/participate in Risk Assessments and documenting risks within the risk register, and identifying and documenting the risk treatment
- Assist the business to document, assess, and remediate any issues raised during audit examinations and risk assessments
- Assist in management of Sprinklr security standards and policies
- Update and maintain the GRC Confluence and share drives
- Assist with management of risks, controls and requests in the GRC tool
- other duties or tasks as assigned by management
Requirements
- A Bachelor's degree in a technical/security field or a non-technical degree with combination of governance, risk and compliance-related work experience
- At least 5-7+ years of experience in risk, compliance management or in an Information Security environment
- Knowledge of security controls frameworks such as ISO 27001/27002 and NIST 800-53
- Generally adept at picking up new technologies and experience working with a GRC tool
- Excellent interpersonal communication, teamwork and project management skills
- Strong written and verbal communication skills
- Strong sense of accountability with the ability to work independently with minimal direction and follow-up
- Demonstrated ability to perform process analysis and experience in documenting controls
- Proven analytical and troubleshooting skills
- A broad understanding of information security risk and controls
- Personal integrity, accountability, and the ability to take ownership of specific tasks and activities
- Able to foster a collaborative working relationship with multiple areas and complex business lines, globally and remotely.
Benefits
- voluntary healthcare coverage
- paid time off
- open Mentoring Program
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.