Governance, Risk & Compliance Analyst

AutoTrader.ca; Ontario; On-site; CAD 75,000 - 95,000; Full time

Job summary

A leading company in online media is seeking a GRC Analyst to join their Governance, Risk, and Compliance team. This role involves developing the GRC program and managing security and risk initiatives, with opportunities for professional growth and a supportive work environment.

Benefits

Gym discounts

Wellness programs

Employee and Family Assistance Program

Financial planning with pension matching

Competitive salary with bonuses

Qualifications

• Bachelor's degree in relevant field or equivalent experience.
• At least 3 years in security risk management or GRC.
• Practical knowledge of standards like SOC2, ISO27001, NIST CSF.

Responsibilities

• Participate in GRC program planning and implementation.
• Support audits and report on compliance.
• Manage third-party vendor risk management.

Skills

Analytical skills

Communication skills

Project management

Education

Bachelor's degree in computer science, information security, or related field

Job description

TRADER Corporation is a trusted Canadian leader in online media, dealer and lender services. The company includes AutoTrader.ca, AutoSync, and Dealertrack Canada. AutoTrader.ca (AutoHebdo.net in Quebec) offers the largest inventory of new and used cars in Canada, with over 25 million monthly visits. AutoSync is the largest and fastest-growing dealer and OEM software provider in Canada, offering connected automotive software solutions such as vAuto, EasyDeal, xtime, Motoinsight, Activix, TAdvantage, and TRFFK. Dealertrack is Canada's largest automotive financing portal, processing over 6.5 million credit applications annually. Collateral Management provides end-to-end technology solutions for compliance and risk management. Visit tradercorporation.com to learn more.

AutoScout24, the parent company of TRADER Corporation, is Europe's largest online car marketplace with over 2 million listings and 43,000 dealer customers. It offers a platform for buying, selling, and financing new and used cars, motorcycles, and commercial vehicles, serving over 30 million users per month across several European countries. More information is available at www.autoscout24.de.

We are leveraging AI and Generative AI (GenAI) to enhance engineering productivity, automate repetitive tasks, and optimize workflows. Candidates should demonstrate the ability to integrate AI-driven solutions into their daily work, such as code generation, debugging, reviews, documentation, and decision support, to improve efficiency and foster innovation.

Summary

The Governance, Risk, and Compliance (GRC) team is responsible for designing and implementing TRADER's GRC framework, including policies, processes, and practices to manage operational and financial crime risks. As a GRC Analyst, you will support the development and execution of the GRC program, work with control managers and stakeholders, assist in audits, and report on risks. This role reports to the Sr. Director GRC.

Responsibilities

1. Participate in planning and implementing the GRC program, including risk appetite, policies, procedures, controls, training, compliance, and audit readiness.
2. Support management in defining strategy, roadmap, and overall GRC direction.
3. Maintain and monitor security and privacy policies and training programs.
4. Support privacy and security risk management initiatives.
5. Conduct compliance audits in collaboration with internal and external resources.
6. Report on KPIs for compliance and security risks.
7. Manage third-party vendor risk management processes.
8. Respond to security questionnaires and privacy law requests (GDPR/CCPA).
9. Identify, communicate, and remediate issues and gaps.
10. Collaborate with stakeholders to ensure timely risk feedback and decision-making support.
11. Coordinate and produce risk reports for senior management and stakeholders.
12. Develop procedures supporting key responsibilities.
13. Provide guidance on security best practices and tools.
14. Assist in assessing and implementing new security solutions.
15. Manage risk projects.

Qualifications

• Bachelor's degree in computer science, information security, or related field, or equivalent experience.
• At least 3 years of experience in security risk management or GRC.
• Practical knowledge of standards like SOC2, ISO27001, NIST CSF, COSO, PCI DSS.
• Strong analytical skills relating security requirements to controls.
• Experience managing multiple projects across teams.
• Excellent verbal and written communication skills, adaptable to different audiences.

#INDHP

What’s in it for you…

• Benefits supporting work-life balance, including gym discounts, wellness programs, and an Employee and Family Assistance Program.
• Benefits from Day 1: gym discounts, wellness events, training budgets, and internal programs.
• Financial planning with 3% pension matching and income protection.
• Competitive salary with annual bonuses and CPP matching.