GRC Analyst

Strategize it Inc.; Winnipeg; On-site; CAD 70,000 - 90,000; Full time

Job summary

Zohorecruit is seeking a contract GRC Analyst in Winnipeg, MB, to support and mature the cybersecurity GRC program. The role focuses on risk assessments, regulatory compliance, and governance, with a transition to a GRC tool.

Ideal candidates have 5-7 years in cybersecurity, risk, or governance and hold or pursue certifications like CISA, CISM, CRISC, or CISSP. The position is hybrid, with work days in-office 2–3 days a week.

Qualifications

• 5-7 years in cybersecurity, risk, compliance, or governance.
• University or college education in Computer Science or related field, or equivalent experience.
• Certifications in IT risk, compliance, or security (CISA, CISM, CRISC, CISSP) are assets.
• Experience with risk assessment methodologies and IT control frameworks (NIST, ISO, PCI, CIS, COBIT).
• Ability to translate policies into actionable operational standards and procedures.
• Strong critical thinking and problem-solving skills.
• Leadership experience and ability to work independently or in a team.
• Experience in IT auditing and technology risk management is an asset.
• Experience using GRC tools.
• Experience facilitating discussions with diverse stakeholder groups.
• Ability to manage multiple priorities and adapt quickly to changing requirements.
• Knowledge of the lottery and gaming industry is an asset.

Responsibilities

• Support the Cybersecurity GRC framework, including related services, standards, and awareness activities.
• Conduct and support cybersecurity risk, third-party, control, audit, regulatory, and compliance assessments, including assisting with the transition to a GRC tool.
• Maintain the cybersecurity risk register and track risks, control deficiencies, and exemptions, including supporting the transition to a GRC tool.
• Work with the existing GRC team to develop the compliance framework and the corresponding processes and procedures required for monitoring, including collaboration with control owners.
• Develop and analyze cybersecurity metrics and key risk indicators to assess program effectiveness and recommend risk treatment strategies.

Skills

Risk assessment

Governance

Cybersecurity

Leadership

Stakeholder management

Analytical thinking

Education

University/College degree in Computer Science or related field

Equivalent education/experience

Tools

GRC tools

Job description

One of our large clients is looking for a contract GRC Analyst, details are as below:

Estimated Start Date: October 20, 2026. Estimated End Date: June 20, 2027. Hours: 7 Hrs/day. Work Arrangement: Hybrid (2-3 days per week in office). Location: Winnipeg, MB.

Role Description

• Support the Cybersecurity GRC framework, including related services, standards, and awareness activities.
• Conduct and support cybersecurity risk, third-party, control, audit, regulatory, and compliance assessments, including assisting with the transition to a GRC tool.
• Maintain the cybersecurity risk register and track risks, control deficiencies, and exemptions, including supporting the transition to a GRC tool.
• Work with the existing GRC team to develop the compliance framework and the corresponding processes and procedures required for monitoring, including collaboration with control owners.
• Develop and analyze cybersecurity metrics and key risk indicators to assess program effectiveness and recommend risk treatment strategies.

Qualifications

• 5-7 years of experience in cybersecurity, risk, compliance, and/or governance.
• University or college education, preferably in Computer Science or a related field, or an equivalent combination of education and experience.
• Professional certifications in IT risk, compliance, or security, such as CISA, CISM, CRISC, or CISSP, are considered assets.
• Experience with risk assessment methodologies and IT control frameworks such as NIST, ISO, PCI, CIS, and COBIT.
• Demonstrated ability to translate policies into actionable operational standards and procedures.
• Strong critical thinking and problem-solving skills.
• Demonstrated leadership experience and ability to work both independently and in a team environment.
• Experience in IT auditing and technology risk management is an asset.
• Previous experience using GRC tools.
• Experience facilitating and influencing discussions with diverse stakeholder groups.
• Ability to manage multiple priorities and adapt quickly to changing requirements.
• Excellent organizational, verbal, and written communication skills.
• Knowledge of the lottery and gaming industry is an asset.