Senior GRC Engineer
New
J
JobgetherSecurity compliance
Based in CanadaFull-TimeSenior
Salary120,000 - 145,000 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.
- Required Skills
- ServiceNowRisk Management
Requirements
- At least 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.
- Demonstrated success managing multiple concurrent audit engagements and remediation initiatives.
- Hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.
- Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or equivalent tools.
- Strong technical understanding of IT controls, information security frameworks, and risk management methodologies.
- Experience developing governance metrics, Key Risk Indicators (KRIs), and dashboards that communicate organizational risk posture.
- Ability to coordinate across business units, leadership teams, and external auditors, and report to executive or board-level audiences.
- Strong organizational and project management skills, including prioritizing remediation activities and meeting fixed deadlines.
- CISSP, CISM, or CRISC certification preferred.
- Experience with DORA, PCI DSS 4.0, or other European regulatory frameworks preferred.
- Background in B2B SaaS compliance and customer audit programs preferred.
- Experience managing multiple concurrent audit frameworks and regulatory examinations preferred.
Responsibilities
- Lead SOC 2, TISAX, and DORA audit remediation initiatives and address findings within established deadlines.
- Manage enterprise risk assessment and treatment processes, maintain risk registers, and coordinate risk acceptance reviews.
- Direct audit evidence collection, control documentation, finding resolution, and audit coordination.
- Develop and maintain governance metrics, Key Risk Indicators (KRIs), and reporting dashboards for customers, executives, and board-level stakeholders.
- Build, maintain, and improve enterprise control frameworks aligned with regulatory obligations, security standards, and customer requirements.
- Manage Plans of Action and Milestones (POAMs), track remediation progress, and oversee vulnerability remediation governance.
- Coordinate compliance activities with business units, executive leadership, and external audit partners.
- Communicate audit progress, outstanding findings, risk exposure, and remediation priorities to stakeholders.
- Establish sustainable compliance processes that reduce remediation backlogs and strengthen ongoing audit readiness.
View Full Description & ApplyYou'll be redirected to the employer's site
