CapIntel - Governance, Risk and Compliance (GRC) Analyst
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• Experience in governance, risk, compliance, information security, or audit-related roles • Experience supporting security or compliance programs such as SOC 2, NIST CSF, ISO 27001, or similar frameworks • security or compliance programs • Exposure to audit processes, including evidence collection, control documentation, or audit coordination • audit processes • Familiarity with risk management concepts, including maintaining risk registers or tracking remediation activities • risk management concepts • Experience completing or coordinating customer security questionnaires is an asset • customer security questionnaires • Strong organizational and project management skills, with the ability to manage multiple compliance workstreams and deadlines • organizational and project management skills • Ability to operate effectively in a fast-moving environment with evolving processes • fast-moving environment with evolving processes • Experience in SaaS, fintech, or financial services environments • SaaS, fintech, or financial services environments • Familiarity with third-party risk management or vendor security assessments • third-party risk management • Exposure to privacy concepts or regulatory environments such as PIPEDA, GDPR, or OSFI guidelines • PIPEDA • GDPR, or OSFI guidelines • Security or risk certifications such as CompTIA Security+, CISA, CRISC, or ISO 27001-related certifications • CompTIA Security+, CISA, CRISC, or ISO 27001-related certifications • Experience contributing to process improvement or automation of compliance workflows, including the use of AI tools • process improvement or automation of compliance workflows, including the use of AI tools • At CapIntel, we design compensation with intention. Each role is assessed against the impact, skills, and experience it requires, and we align our pay to competitive market data so candidates know what to expect from the start. • Your final offer will reflect your experience, skillset, and location. The listed range is a guideline, and the range for this role may be modified. • Compensation at CapIntel goes beyond base pay. Depending on the role, total rewards may include variable pay, equity, comprehensive benefits, flexible time off, and dedicated opportunities for growth and development. • If you’d like to understand more about our approach, we’re happy to walk through it during the hiring process. • For roles based in or eligible to work from Ontario, the expected base salary range is: • $80,000 - $110,000 CAD • Not sure you meet every requirement? • We care most about mindset: your drive, curiosity and commitment to delivering great work. While experience matters, we know that careers aren’t always linear. If this role excites you and you believe you can make an impact with us, we want to hear from you. • Why you'll enjoy working here • Learn more about life at CapIntel on our Careers page, including the virtues that inspire how we work and the perks and benefits designed to support your growth and well-being. We’re a team built on trust, respect, and collaboration. This powers everything we do and creates a space to challenge and elevate each other as we work towards our shared vision. If this speaks to you, we’d be excited to have you with us.
Responsibilities
• Support CapIntel’s Governance, Risk, and Compliance program • Maintain and improve security policies, standards, and procedures to support the ongoing maturity of CapIntel’s Information Security Program. • Maintain the company’s risk register, including tracking remediation activities and providing regular updates on risk posture. • Support SOC 2 and other compliance initiatives by assisting with control design, coordinating evidence collection, and supporting internal and external audits. • Track audit findings and remediation actions to ensure issues are resolved in a timely manner and controls remain effective. • Manage third-party risk and customer security reviews • Execute vendor security assessments and due diligence reviews, maintain the vendor risk register, and track remediation of identified risks. • Coordinate vendor reassessment cycles and escalate material risks or concerns when necessary. • Serve as the primary point of contact for customer and prospect security questionnaires, maintaining a library of standardized responses and coordinating with internal teams when needed. • Participate in customer security discussions or audits to represent CapIntel’s security posture. • Support operational security, privacy, and security awareness initiatives • Assist the Security Incident Response Team (SIRT) during incidents by coordinating documentation, timelines, and communications. • Support the maintenance and testing of Business Continuity and Disaster Recovery plans and track post-incident action items. • Assist with privacy and data protection initiatives, including data mapping, data handling reviews, and breach response coordination in partnership with Legal and Security leadership. • Support CapIntel’s security awareness program by coordinating training campaigns, phishing simulations, and tracking participation metrics.
Benefits
• Learn more about life at CapIntel on our Careers page, including the virtues that inspire how we work and the perks and benefits designed to support your growth and well-being. We’re a team built on trust, respect, and collaboration. This powers everything we do and creates a space to challenge and elevate each other as we work towards our shared vision. If this speaks to you, we’d be excited to have you with us. • Create a Job Alert • Interested in building your career at CapIntel? Get future opportunities sent straight to your email.
No credit card. Takes 10 seconds.