Information Security, GRC Analyst:
On behalf of our Enterprise client, Procom is searching for an Information Security, GRC Analyst for a permanent role. This position is a hybrid position with 4 days onsite at our client’s Calgary or Toronto office.
Information Security, GRC Analyst - Job Description:
The Information Security, GRC Analyst will support the implementation and maintenance of the organization’s Governance, Risk, and Compliance (GRC) program. The role focuses on third-party security compliance, security governance, and internal controls, contributing to a risk-based security framework aligned with industry standards such as ISO 27001 and ISO 22301.
Information Security, GRC Analyst - Responsibilities:
- Oversee the cybersecurity compliance program for third parties
- Manage requests related to the security program from clients, prospects, auditors, and others
- Ensure compliance of the Firm's key IT vendors with information security standards
- Track and ensure completion of key internal security tasks
- Maintain security dashboards, metrics, and reports
- Conduct security tasks to maintain ISO 27001 and ISO 22301 certifications
- Conduct limited internal security audits and collaborate to remediate compliance gaps
Information Security, GRC Analyst - Mandatory Skills:
- Bachelor's degree in information technology, computer science, cybersecurity, or related field
- Minimum three years of experience in IT compliance, risk management, or information security
- Knowledge of regulatory frameworks (e.g., ISO 27001, ISO 22301, NIST)
- Experience with security risk management processes and compliance tools
- Outstanding oral and written communication skills
- Excellent interpersonal relationship skills
- High-level of attention to detail and accuracy
Information Security, GRC Analyst – Nice-to-Have Skills:
- Professional certifications such as CISSP, CISA, CISM, CRISC
- SANS/GIAC, CompTIA Security+, CEH
Information Security, GRC Analyst – Assignment Length:
This is a permanent position.
Information Security, GRC Analyst - Start Date:
ASAP.
Information Security, GRC Analyst - Assignment Location:
Calgary or Toronto, ON, hybrid with 4 days in office.
