“GRC tools” jobs in Canada

No matching filters. Try another name.

Results

• 2h

  Technology Risk & Governance Lead – Banking Transformation

  Toronto, ON

  

  Capco: Capco, a Wipro company, is a global technology and management consultancy specializing in driving digital transformation in the financial services…

  8+ YOECandidates need 8 to 12+ years of experience, including at least 5 in technology risk, GRC or regulatory compliance, and 3 supporting large financial institutions. Strong skills in control testing, audit evidence, information security standards and Canadian financial regulation are required.

  ServiceNow IRM, Archer

• 17h

  Senior Product Designer

  Remote in Canada

  Remote

  H

  Hyperproof

  5+ YOECandidates need 5+ years of product design experience, including 3+ years in B2B SaaS, and a portfolio of interactive or shipped work. Hands-on experience building prototypes with Claude Code, Cursor or a similar tool, front-end literacy in HTML, CSS, React and Git, and strong qualitative and quantitative research skills are required.

  Claude Code, Cursor, Figma, Git, React

• 1d

  Compliance & Security Specialist

  Oakville, ON

  Full Time

  CT

  Canadian Tire Bank

  Canadian Tire Bank needs a university degree or college diploma in a technology or security field, up to three years of IT, security, risk or audit experience, and working knowledge of security frameworks such as NIST, ISO 27001 and COBIT. Certifications like CISSP or CISM are an asset.

  IBM OpenPages

• 1d

  Security Risk Engineer

  Vancouver, BC

  

  Asana

  7+ YOECandidates need 7+ years in information security with a focus on risk management and GRC, and hands-on experience with quantitative risk methods such as FAIR. They also need scripting and automation skills, deep knowledge of frameworks like NIST CSF and ISO 27001, and strong communication skills.

  FAIR, SIEM, vulnerability scanners, cloud security tooling

• 2d

  Technical Lead, Cyber & Technology Compliance

  Brampton, ON

  Full Time

  L

  Loblaw

  Candidates need hands-on cyber security or technology compliance experience from a risk, audit, assurance or advisory role. They should know IT control frameworks such as NIST CSF 2.0 and ISO 27001, have a professional certification like CISA, CISM, CRISC, CISSP or PCI QSA, and have working knowledge of a GRC tool such as ServiceNow or Archer.

  ServiceNow, Archer, PowerPoint

• 2d

  AI Governance Specialist

  London, ON

  $95k–$135k/yrFull Time

  MG

  Mobility Global

  Mobility Global needs candidates with experience in AI/ML governance, compliance, technology risk or a related regulatory function. They should know AI frameworks and laws such as NIST AI RMF, ISO 42001, and the EU AI Act, and have policy or standards writing experience.

• 2d

  Senior Cybersecurity Program Manager

  Remote in Canada

  RemoteFull Time

  

  Jobgether

  7+ YOECandidates need a bachelor's degree or equivalent experience and at least 7 years in cybersecurity, compliance or cloud program management. They need working knowledge of FedRAMP, NIST SP 800-53, ITSG-33 and Protected B, plus Canadian citizenship and eligibility for Reliability Status.

  AWS GovCloud, eMASS, SIEM, GRC platform, Ticketing system

• 2d

  SOC Experience Lead

  Remote in Canada

  RemoteContract

  RA

  RS Assurance and Advisory PLLC

  5+ YOECandidates need 5+ years in SOC 1, SOC 2, IT audit, risk management or security compliance, strong knowledge of SOC 2 Trust Services Criteria, and experience with ISO 27001, NIST and PCI DSS. Strong communication, project management and GRC or compliance automation experience are required; CPA, CISA, CISSP or CISM are preferred.

  Vanta, Drata, Secureframe, GRC platforms

• 2d

  Digital Risk - Senior

  Montréal, QC

  

  EY

  3+ YOECandidates need 3 to 5 years of experience in ERP security, IT governance and risk assessment, plus a relevant bachelor's degree. An accounting or audit designation such as CPA, CIA or CISA, or working towards one, is required, and knowledge of COBIT, ITIL, SAP or Oracle is an asset.

  SAP, Oracle, Windows, SharePoint, GRC solutions

• 2d

  ISO Lead Auditor / ISO Consultant - British Columbia

  Vancouver, BC

  Contract

  I

  IMSM

  Candidates need IRCA Lead Auditor certification or equivalent and experience with ISO standards such as 9001, 14001, 45001, 42001 or 27001. They also need a background in implementing or auditing management systems, plus strong communication and organisational skills.

• 2d

  Senior Director, Technology Risk Assessments

  Toronto, ON

  

  Scotiabank

  10+ YOECandidates need a university degree in computer science, engineering, information security or a related field, and 10+ years of progressive technology or cybersecurity risk experience, including senior leadership of assessment functions. Strong expertise in threat modelling, third-party security, cloud and AI security, and GRC transformation on ServiceNow IRM is required.

  ServiceNow IRM

• 2d

  Operational Risk & Controls Lead

  Waterloo, ON +3

  Full Time

  C1

  Company 1 - The Manufacturers Life Insurance Company

  5+ YOECandidates need a bachelor's degree in business, finance, risk management or a related field, and 5 to 7 years of experience in insurance operations or financial services. They should understand insurance servicing, control frameworks and governance, and have leadership and coaching experience. Experience with GRC platforms such as Archer and French bilingualism are assets.

  Archer

  4d

  Senior Analyst, Operations Risk & Controls

  Waterloo, ON +2

  Full Time

  C1

  Company 1 - The Manufacturers Life Insurance Company

  5+ YOECandidates need 5+ years in operational risk, audit, controls, consulting, project risk or transformation governance, plus experience assessing risks in large change initiatives. Archer GRC experience is a strong asset.

  Archer GRC

• 3d

  Strategy, Transformation & Risk, Senior Associate

  Toronto, ON

  Full Time

  

  Pwc Canada

  Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to translate them into practical client advice. Technical designations such as CISSP, CRISC or CISA are preferred, along with strong business and technical communication skills.

  GRC platforms

• 3d

  Commandant·e de réponse aux incidents cyber / Cyber Incident Response Commander

  Montréal, QC

  HybridFull Time

  

  Sopra Steria: The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range…

  5+ YOECandidates need 5+ years in CERT, SOC, SecOps or GRC roles, and knowledge of incident management frameworks such as ISO 27035, NIST and SANS. Calm leadership under pressure, strong written and spoken English, and cybersecurity certifications such as GCFA, CISSP or ECIH are expected.

  SOC tools, forensic tools

• 3d

  Data Protection Specialist (IT) - Hybrid

  Toronto, ON

  $108k–$124k/yr

  

  The Globe and Mail

  5+ YOECandidates need at least 5 years of privacy and data governance experience and a post-secondary degree or equivalent experience with continuing professional development. They must know Canadian privacy law, have project or program management experience, and be comfortable explaining technical data systems and controls.

  Consent management system, GRC tools

  3d

  Data Protection Specialist (IT)

  Toronto, ON

  $108k–$124k/yr

  

  The Globe and Mail

  5+ YOECandidates need at least 5 years of privacy and data governance experience and knowledge of Canadian privacy laws. They also need data mapping, privacy impact assessment and project management experience, plus enough technical knowledge of databases, cloud and data flows to work with IT teams.

  consent management system

• 3d

  Strategy, Transformation & Risk, Senior Associate

  Toronto, ON

  Full Time

  

  PricewaterhouseCoopers LLP

  Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to turn them into practical client advice. Strong written, verbal and presentation skills for senior executives are required, and CISSP, CRISC or CISA are preferred.

  GRC platforms

• 3d

  Internal Controls Governance Analyst - 12-month Contract

  Toronto, ON

  

  Zurich Insurance Company Ltd.

  3+ YOECandidates need a bachelor's degree with 3+ years of risk management experience, or a high school diploma with 5+ years. Preferred skills include internal control frameworks such as COSO and ICFR, GRC platform experience, and strong Excel and PowerPoint skills.

  Polaris, ServiceNow IRM, Archer, Microsoft Excel, Microsoft PowerPoint

• 3d

  Director, Technology Assurance, Risk & Resilience

  Edmonton, AB

  Full Time

  

  Aplin

  Candidates need a proven leadership background in technology risk, IT governance, IT audit or security GRC in regulated environments. They should know control testing, risk registers and frameworks such as ISO, NIST, COBIT and ITIL, and have DR planning experience.

  Leadership, Stakeholder management, ITIL, CISA, CISSP

• 4d

  Senior Commercial Counsel, Enterprise West (Remote Canada)

  Remote in Canada

  $208k–$286k/yrRemoteFull Time

  

  Optro

  8+ YOECandidates need 8+ years of in-house transactional experience and 5+ years negotiating SaaS agreements with enterprise customers. They must be licensed to practise law in good standing in their state of residence and manage multiple deadlines in a fast-paced setting.

  Microsoft Office

• 4d

  Partner, Cybersecurity Governance, Risk and Compliance (24 Month Contract)

  Montréal, QC

  VA

  Vacances Air Canada / Air Canada Vacations

  8+ YOECandidates need 8 to 12+ years in cybersecurity governance, risk and compliance, and CISSP and/or CISM certification. Experience implementing NIST or ISO frameworks and large transformation programs is required, with CRISC, ISO 27001 Lead Implementer or Lead Auditor, and CDMP as assets.

  4d

  Partner, Cybersecurity Governance, Risk and Compliance (24 Month Contract)

  Montréal, QC

  VA

  Vacances Air Canada / Air Canada Vacations

  8+ YOECandidates need 8 to 12+ years in cybersecurity governance, risk and compliance, and CISSP and/or CISM certification. Experience implementing NIST or ISO frameworks and large transformation programs is required, with CRISC, ISO 27001 Lead Implementer or Lead Auditor, and CDMP as assets.

• 4d

  Junior GRC Analyst Intern

  Toronto, ON

  $20–$23/hrFull Time

  

  TSX Inc.

  Candidates need current enrolment in an accredited post-secondary program in computer science, cybersecurity, IT, engineering or a related discipline. They need foundational knowledge of information security frameworks, strong Excel or Google Sheets skills, and good analytical and communication abilities.

  Microsoft Excel, Google Sheets, ServiceNow, Google Workspace

21 companies