IT Governance Risk & Compliance Analyst

ANBL

IT Governance Risk & Compliance Analyst

Term – 3 years

Essential role information

Title: IT Governance Risk & Compliance Analyst

Language requirement: Spoken and written competence in English

Location: On-site or hybrid at ANBL’s Retail Operations Centre in Fredericton, NB

Duration: 3 year Term

Closing: November 13^th 2026

Who we are

As one of Atlantic Canada’s Top Employers for 2025 and 2026, ANBL is proud of the people-first culture we’ve built together with our team members. Alcool NB Liquor (ANBL) is a provincial Crown corporation responsible for the purchase, importation, distribution, and retail activity for all beverage alcohol in the province.

Our sister company, Cannabis NB (CNB), manages retail cannabis sales for the province, providing safe and legal products while focusing on education, safety and responsible access.

Together, ANBL & CNB return 100% of profits to the Government of New Brunswick to benefit all New Brunswickers while responsibly serving customer and communities across the province.

Corporate Social Responsibility at ANBL

At ANBL, we take our social responsibility seriously. With our Corporate Social Responsibility Strategy to guide us, we are committed to:

• Responsible selling through our CHECK 30 program, which specifies that customers who look younger than 30 will be asked for valid photo identification.
• Food security through our partnership with Feed Nourrir NB to help get more food to the New Brunswickers who need it.
• Helping New Brunswickers get home safely through our Safe Ride program, providing FREE transportation at ANBL-sponsored events.

None of these efforts would be possible without the more than 800 team members who are the lifeblood of our organization and choose ANBL as their employer.

What's in it for you?

Being part of the team at ANBL means working in an organization that values its people and encourages every employee to have a voice. Our team takes pride in contributing to the communities and province we serve.

At ANBL, we also support both personal and professional growth through internal and external development opportunities, including our Leadership Development Program.

About the IT Governance Risk & Compliance Analyst role
At Alcool NB Liquor, we look for people whose values align with ours! Integrity, Caring, Trust, Community and Celebration. We value team members who collaborate well, make thoughtful decisions, support others, and take pride in delivering great experiences while celebrating success together.

This role manages compliance initiatives and supports cybersecurity strategies and programs that ensure ANBL and CNB’s security measures are effective, compliant, and up to date. They work with the Manager of Cybersecurity and Compliance to continually keep strategies and programs updated to meet compliance across both organizations. This role stays up to date on leading cybersecurity practices to understand how they apply in the context of ANBL and CNB. They also partner closely with learning and development teams, including external vendors, to socialize cybersecurity practices that should be followed by the entire organization as a collective effort to drive greater awareness and to minimize cyber vulnerabilities.

Additional Responsibilities

• Assist the cybersecurity team in developing and maintaining a security compliance and audit management framework to manage, track, report, and monitor technology and cybersecurity related audit activities, compliance obligations, findings and remediation action plans. Manage entire security audit life cycle from defining compliance metrics, KPI, KRI, security framework, policies, regulations to ensure that security compliance framework is being consistently followed and risks are proactively identified and addressed for all internal and external stakeholders (e.g., security audit firms, technology senior management, business units, subject matter experts, third party vendors) to ensure a consistent framework and mechanisms to proactively monitor to safeguard company assets
• Coordinates and monitors all technology and security audit-related requirements, audit materials and frameworks along with associated tasks, such as ensuring the readiness for audit testing and reviewing all audit findings and facilitating the timely resolution of any audit findings with the required parties for corrective action.
• Liaise across IT, business areas, and internal and external audit firms managing commitment to internal and external auditors, and provide IT leadership with materials needed for senior management audit meetings
• Develop periodic compliance and audit reports for cybersecurity leadership and management. Track key performance and risk indicators, including overdue findings, remediation timelines, control effectiveness, and compliance status. Develop dashboard using tools such as Power Bi, Excel, or GRC platform. Promote cybersecurity through regular self-assessment activities and enhancement of tools and processes gathering feedback from leadership, cross-functional teams, and third parties to ensure security programs and initiatives remain current and pertinent to ANBL and CNB.

What do you need to be successful?

• Knowledge of regulatory compliance and frameworks (e.g., ISO/IEC 27001/27002, NIST CSF, NIST SP 800-53, RTIPPA, etc.), ability to deliver security compliance register and control mapping matrix.
• Effective communication skills to convey security concepts to non-technical stakeholders.
• Experience with PCI/DSS compliance and annual attestation
• Knowledge in assessing vendor infrastructure solutions and conducting Proof of Concepts to determine effective solutions
• Knowledge of data privacy and digital forensics tools
• At least 3 to 5 years of experience in Governance, Risk & Compliance with major focus on audit and compliance.

Would be an asset if you had:

• Postsecondary education in Computer Science, Information Technology, Cybersecurity or similar (while a formal degree or diploma is preferred, we value practical experience and are open to considering candidates with equivalent experience in lieu of educational qualifications)
• Certifications, such as Security+, CISA or CRISC considered an asset

Key Competencies

• Manages Complexity: Makes sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.
• Ensure Accountability: Holds self and others accountable to meet commitments.
• Optimizes Work Processes: Knows the most effective and efficient processes to get things done, with a focus on continuous improvement.
• Tech Savvy: Anticipates and adopts innovations in business-building digital and technology applications.
• Decision Quality: Maneuvers comfortably through complex policy, process, and people-related organizational dynamics.

Language competencies

• Bilingualism in both official languages is an asset, but not required

Work location:

• The Retail Operations Centre is located in Fredericton, New Brunswick.
• The successful candidate must be based in New Brunswick; a hybrid work arrangement is possible.
• Semi-regular travel for meetings and project work may be required.

Compensation information:

• $ 75,720 - $97,002

Benefits information:

• Comprehensive benefits package, including medical, dental coverage and a generous pension plan.
• Access to a Health Spending Account or Wellness Subsidy
• Opportunities to utilize flexible work arrangements, such as remote or hybrid work.

Note

• Only candidates with legal authorization to work in Canada will be considered

Alcool NB Liquor (ANBL) is proud to be an equal opportunity employer and is committed to reflecting the diverse communities we serve. We foster an inclusive and accessible workplace, and accommodations may be provided upon request, in all aspects of the selection process.