Cybersecurity Governance, Risk, and Compliance

Tata Consultancy Services; Calgary; On-site; CAD 90,000 - 120,000; Full time

Job summary

Tata Consultancy Services (TCS) in Canada is seeking an experienced Cybersecurity GRC Analyst to support governance, risk, and compliance across a large enterprise environment. You will handle identity hygiene, entitlement reviews, control validation, evidence collection, and remediation tracking in collaboration with IT, security, and audit teams.

Key responsibilities include monitoring DLP, endpoint governance, SIEM alerts, and maintaining control documentation.

Qualifications

• 7+ years in GRC and cybersecurity domains.
• Experience with enterprise security controls and auditing.
• Familiarity with regulatory requirements and risk assessment.

Responsibilities

• Identity hygiene and entitlement reviews to enforce least privilege.
• Monitor and manage DLP and endpoint governance controls.
• Gather audit evidence and support internal/external audits.
• Produce SOPs, metrics, and control performance reports.
• Collaborate with IT, security, and audit teams to improve processes.

Skills

GRC

Cyber security

Identity governance

Access reviews

Security analytics

Tools

Splunk SIEM

CrowdStrike Falcon

Microsoft Purview DLP

BeyondTrust EPM

Job description

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

TCS has been serving the Canadian marketplace for more than 35 years and today is the technology partner of choice for many of the country's leading organizations. As one of the largest IT services providers in Canada and globally, TCS is aiming to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence.

Rooted in the heritage and values of the Tata Group, TCS is focused on creating long‑term value for its clients, investors, employees, and the communities it serves. With a highly skilled workforce supporting customers from coast to coast, TCS has consistently been recognized as a Top Employer by the Top Employers Institute, including a recent top ranking at the country level.

TCS also sponsors 14 of the world's most prestigious marathons and endurance events, including the TCS Toronto Waterfront Marathon, reflecting its commitment to health, sustainability, and community empowerment.

Job Description :

Senior Years of experience in GRC and Cyber security domain

The Cybersecurity GRC Analyst supports the operation, administration, monitoring, and assurance of foundational cybersecurity controls across a large enterprise environment. This hands‑on position is responsible for recurring operational GRC activities—ranging from identity hygiene and entitlement reviews to control validation, evidence collection, and remediation tracking.

Candidates will collaborate closely with cross‑functional IT, security, and audit teams while leveraging industry‑leading security solutions to maintain robust security posture and compliance integrity.

Key Responsibilities

Identity & Access Governance

• Perform recurring identity and account hygiene activities to ensure least‑privilege enforcement.
• Facilitate and track user access and entitlement reviews across enterprise systems and applications.

Control Administration & Monitoring

• Support the operation and administration of Microsoft Purview Data Loss Prevention (DLP) and BeyondTrust Endpoint Privilege Management (EPM).
• Monitor security logs and operational alerts via Splunk (SIEM).
• Oversee endpoint security control governance and policy enforcement using CrowdStrike Falcon.

Audit, Compliance & Control Assurance

• Conduct control validation activities to verify the effectiveness and health of security controls.
• Gather, validate, and organize audit evidence for internal/external audits and regulatory assessments.
• Maintain centralized tracking for control gaps, audit findings, and remediation action plans.

Process Improvement & Reporting

• Draft and maintain clear standard operating procedures (SOPs) and control documentation.
• Provide metrics, dashboards, and reporting on control performance and compliance status to leadership.