Senior GRC Analyst

The role

This person will manage security governance, risk, and compliance as the Alternate Company Security Officer. They will support Canadian Government security requirements and oversee information security controls and audits.

What you will do

• Support the Company Security Officer and perform Alternate Company Security Officer functions.
• Support compliance with Public Services and Procurement Canada (PSPC) requirements.
• Manage clearance requests, security briefings, incidents, and debriefings.
• Review commercial and government contracts for security clauses.
• Identify and assess regulatory, government, contractual, and customer security requirements.
• Maintain and implement global information security policies and standards.
• Support customer and government security assurance activities.
• Support third-party and supplier security risk assessments.
• Support internal and external audits and certification activities.
• Work with internal and client teams to assess control effectiveness.

Required qualifications

• 8+ years in information security governance, risk, compliance or security assurance, across global frameworks and regulated government environments
• Experience with government security requirements personnel screening, organizational security, and contractual obligations
• A solid track record running security risk assessments, audits, control testing, and remediation
• A solid working knowledge of ISO/IEC 27001, SOC 2, NIST SP 800-53 (or equivalent) and enterprise/cloud security controls
• Strong communication skills, comfortable engaging senior stakeholders, auditors, and government representatives
• Experience operating within a global security function while owning Government specific requirements
• A strong technical communication ability with demonstrable experience of working in rapidly changing client environments
• Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders
• Experience partnering closely with Privacy and Legal teams on regulatory compliance initiatives
• Experience managing control evidence, remediation programs, and continuous compliance activities
• Strong project management and organizational skills

Nice to have

• Professional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor
• Prior experience in a high-growth and fat-paced FinTech/SaaS/enterprise software environments
• Knowledge of privacy regulations (PIPEDA, GDPR) alongside security frameworks

Benefits

• Competitive salary + bonus
• 100% RRSP match up to 5%
• Competitive annual leave, plus your birthday off, parental leave, PTO, and observed holidays
• Comprehensive benefits coverage, including mental health support, fitness reimbursements, and financial well-being
• Tax-advantageous benefits, such as commuter benefits, healthcare, and dependent care
• Regularly bench-marked salary rates
• Well-being days
• Volunteer Day off
• Work from Home Equipment
• Free Subscription to a meditation, relaxation and sleep app
• Continuous Training and Development
• Work from Anywhere policy (up to 2 months working outside of country of employment over a rolling 12-month period)

Before you apply

• Requires an active Government of Canada Secret (Level II) security clearance, or the ability to obtain and maintain this clearance
• Successful completion of the required security screening is a condition of employment

About the company

Quantexa is a tech company that has been innovating the data analytics market since 2016. The company uses technology to tackle criminal activity and help businesses grow.