GRC Analyst II

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee Payscale's data classification initiative, which includes the classification schema, tagging standards, and collaboration with data owners to guarantee precise and uniform classification across various systems and assets.

• Sustain the inventory of system classifications and ownership, collaborating with teams to ensure systems are accurately classified, attributed, and reviewed regularly.

• Assist in coordinating audit activities for SOC 2 and other compliance frameworks.

• Perform reviews of vendor security assessments.

• Manage the lifecycle of policy management, which involves drafting new policies and standards, tracking review cycles, coordinating approvals, and maintaining version control.

• Identify control deficiencies or opportunities for process enhancements and collaborate with business units to establish and maintain effective controls.

⛳️ Requirements

• A Bachelor's degree in cybersecurity, information systems, or a related discipline.

• 2-4 years of professional experience in Governance, Risk, and Compliance (GRC), information security, or a related area within a commercial SaaS or software organization.

• Familiarity with information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS.

• Proven experience with data classification frameworks and data governance principles.

• Experience in conducting vendor security assessments and managing third-party risk processes.

• Practical experience with audit support tasks, including evidence collection for SOC 2 or similar frameworks.

• A solid understanding of information security policies, standards, and procedures.

• Hands-on experience with GRC tools or platforms (e.g., Drata, ServiceNow GRC, or similar).

• Excellent written and verbal communication skills, capable of engaging both technical and non-technical stakeholders.

• Ability to independently manage multiple workstreams, prioritize tasks effectively, and meet deadlines.

🏝️ Benefits

• Holiday – Annual accrual for full-time and part-time employees.

• Sick Pay – Annual paid time off available.

• Company Paid and Statutory Holidays – Generous time off provided.

• 16 weeks of paid parental leave (top off) for both birthing and non-birthing parents.

• Life Insurance - Basic life and AD&D benefit.

• Long term disability & Critical Illness – Coverage for specific types of illnesses and surgeries.

• Medical/Rx, Dental, Telehealth – Coverage for prescription medications, paramedical services, medical supplies, emergency services, basic and accidental dental, and virtual health care services.

• Health/Wellness Spending Account – Annual funds allocated for approved expenses for you and your family.

• RRSP offered to employees with a 1:1 match up to 4%.

• BenefitHub – Access to a discount marketplace and full access to all your benefits and provider portals.

• Annual remote work stipend designated for wellness or home office equipment.