Senior GRC Engineer

Accountabilities

You will take ownership of governance, risk, and compliance activities across multiple enterprise frameworks, driving audit readiness, remediation, and continuous improvement. Your responsibilities will include:

• Lead SOC 2, TISAX, and DORA audit remediation initiatives, ensuring findings are addressed within established deadlines.

• Manage enterprise risk assessment and treatment processes, including maintaining risk registers and coordinating risk acceptance reviews.

• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across applicable frameworks.

• Develop and maintain governance metrics, Key Risk Indicators (KRIs), and reporting dashboards for customers, executives, and board-level stakeholders.

• Build, maintain, and improve enterprise control frameworks aligned with regulatory obligations, security standards, and customer requirements.

• Manage Plans of Action and Milestones (POAMs), track remediation progress, and oversee vulnerability remediation governance.

• Coordinate compliance activities with business units, executive leadership, and external audit partners.

• Communicate audit progress, outstanding findings, risk exposure, and remediation priorities to relevant stakeholders.

• Establish sustainable compliance processes that reduce remediation backlogs and strengthen ongoing audit readiness.

• Promote a proactive risk management approach through accurate reporting, clear accountability, and continuous improvement.

Requirements

The ideal candidate combines extensive GRC experience with strong technical knowledge of security controls, audit frameworks, and enterprise risk management. They should be comfortable managing several compliance initiatives simultaneously and communicating complex risk matters to both technical and executive audiences. Key qualifications include:

• At least 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.

• Demonstrated success managing multiple concurrent audit engagements and remediation initiatives.

• Extensive hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.

• Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or equivalent tools.

• Strong technical understanding of IT controls, information security frameworks, and risk management methodologies.

• Excellent written and verbal communication skills, particularly for audit coordination, exception tracking, and executive or board-level reporting.

• Experience developing governance metrics, Key Risk Indicators (KRIs), and dashboards that clearly communicate organizational risk posture.

• Ability to coordinate effectively across business units, leadership teams, and external auditors.

• Strong organizational and project management skills, with the ability to prioritize remediation activities and deliver against fixed deadlines.

Preferred qualifications:

• CISSP, CISM, or CRISC certification.

• Experience with DORA, PCI DSS 4.0, or other European regulatory frameworks.

• Background in B2B SaaS compliance and customer audit programs.

• Experience managing multiple concurrent audit frameworks and regulatory examinations.

• Legal authorization to work in Canada is required. Employment sponsorship is not provided.

Benefits

• Annual starting salary range of CAD 120,000–145,000 for Canada-based employees.

• Compensation determined by relevant skills, education, qualifications, experience, performance, organizational needs, and geographic location.

• Potential eligibility for medical, dental, and vision coverage.

• Disability and life insurance programs.

• Retirement savings programs.

• Paid time off.

• Wellness programs.

• Additional company-sponsored benefits, depending on country and employment status.

• Remote-first working environment with flexible work arrangements.

• Learning and professional development opportunities.

• Collaborative culture focused on innovation, accountability, customer success, and data-driven decision-making.