Senior Governance, Risk, & Compliance Analyst in Canada Creek, Nova Scotia at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Governance, Risk, & Compliance Analyst based in the Canada.

This is a senior GRC role focused on strengthening security, privacy, risk management, and compliance across a complex technology environment. You will assess the effectiveness of enterprise controls, identify areas of risk, and help design practical improvements aligned with recognized industry frameworks. The position combines technical security assessments, governance and assurance activities, risk analysis, and cross-functional program leadership. You will work closely with Engineering, IT, Product, R&D, Finance, Legal, Internal Audit, and other stakeholders across the organization. Your analysis and reporting will help senior leaders make informed decisions and address evolving security and compliance priorities. This is an opportunity to influence enterprise-wide controls and assurance practices within a fast-moving, cloud-native and SaaS environment.

• Evaluate and report on the adequacy and effectiveness of system designs and controls against business, operational, security, privacy, and compliance objectives.
• Lead discovery sessions with cross-functional teams to identify, document, assess, and improve enterprise controls and compliance practices.
• Plan and execute detailed technical security and privacy assessments across information systems, leveraging established industry frameworks and standards.
• Plan, conduct, and report on governance, risk, compliance, and assurance reviews, including post-remediation validation activities.
• Perform ongoing control and risk assessments and contribute to a dynamic assurance plan focused on addressing the organization’s highest-risk areas.
• Lead the design and implementation of innovative, scalable compliance and control improvements across the organization.
• Drive compliance-related change management initiatives, helping teams adopt new controls, processes, standards, and governance practices.
• Support management in addressing complex matters involving internal and external auditors, regulators, and other assurance stakeholders.
• Develop clear, data-driven reports, presentations, and executive updates that communicate risks, findings, trends, and recommendations effectively.
• Partner closely with Engineering, IT, Product, R&D, Finance, Legal, Internal Audit, and other teams to resolve issues and strengthen enterprise risk and control environments.
• Identify control gaps, emerging risks, and opportunities for improvement and translate findings into actionable recommendations.
• Help establish structure and clarity in complex or ambiguous situations while balancing competing priorities, deadlines, and stakeholder needs.
• Promote strong security, privacy, risk, and compliance practices across the organization while supporting broader business objectives.

• 10+ years of experience in governance, risk management, compliance, or related disciplines, with exposure to areas such as management consulting, technology, financial services, or project management.
• Bachelor’s degree required, preferably in Business, Information Systems, Computer Science, or a related field.
• Strong knowledge of security and privacy frameworks and standards such as ISO 27001, SOC 2, CMMC, PCI, and related industry requirements.
• Hands-on experience with GRC automation platforms and tools.
• Strong understanding of enterprise risk management frameworks, governance principles, and assurance methodologies.
• Solid knowledge of cloud security controls, general application controls, and risk considerations within cloud-native environments.
• Proven experience assessing technology environments, controls, and processes across SaaS or other modern technology organizations.
• Strong analytical and problem-solving capabilities, with the ability to bring structure to complex, ambiguous, and rapidly evolving situations.
• Excellent written, verbal, presentation, and report-writing skills, including the ability to communicate effectively with executive-level audiences.
• Demonstrated project management skills and the ability to manage multiple teams, stakeholders, priorities, and timelines simultaneously.
• Strong cross-functional collaboration and influencing skills, including the ability to resolve conflicts and drive alignment without relying solely on formal authority.
• Ability to adapt quickly to changing priorities, demands, and timelines while maintaining quality and attention to detail.
• Strong technical understanding of SaaS environments and modern enterprise technology.
• Professional certifications such as CIA, CISA, CRISC, CISM, CISSP, or equivalent are preferred.
• Experience working directly on complex GRC, security, risk, compliance, or assurance initiatives is highly valued.
• Ability to participate in remote video interviews with cameras on; reasonable accommodations may be available where technical, bandwidth, accessibility, or other circumstances prevent video use.

• Base salary range of $58,000–$222,000 USD annually, with actual compensation varying based on skills, experience, location, and job level.
• Variable incentive compensation.
• New-hire equity grants.
• Comprehensive benefits package.
• Medical, mental health, dental, disability, and life insurance coverage, along with AD&D and additional value-added services.
• Employee Assistance Program (EAP), including mental health resources.
• Fertility support and paid parental leave.
• Flexible time off and paid volunteer days.
• 401(k) and RRSP matching opportunities, depending on eligibility and location.
• Training, professional development, and career growth programs.
• Flexible and remote work environment.
• Inclusive and collaborative culture that values diverse perspectives and backgrounds.
• Support for reasonable accommodations throughout the recruitment and employment process.
• Background checks are required for the position, and certain duties may be subject to U.S. export control authorization requirements.