GRC Lead - ISO 27001 & SOC 2 (Remote Canada)

WELLSTAR; Remote; CAD 130,000 - 150,000; Full time

Job summary

A healthcare technology company in Canada is seeking a Governance, Risk, and Compliance (GRC) Lead to drive compliance efforts and shape the function. The ideal candidate has over 8 years of experience in GRC or related fields, with a strong understanding of ISO 27001 and SOC 2 Type 2 standards. This remote-friendly position involves partnering with leaders across multiple entities, making a direct impact on compliance operations. The salary range is $130,000-$150,000, reflecting the candidate's experience and value.

Benefits

Career development opportunities

Work with multiple subsidiaries

Supportive and inclusive workplace

Qualifications

• 8+ years in GRC, compliance, risk management, or IT audit.
• Experience with ISO 27001 and SOC 2 Type 2 programs across entities.
• Strong written and verbal communication skills.
• Detail-oriented and proactive approach.

Responsibilities

• Oversee WELLSTAR's ISO 27001 ISMS and SOC 2 Type 2 control framework.
• Establish and improve GRC practices to scale with growth.
• Own compliance onboarding process for acquired entities.
• Perform gap analyses and risk assessments.
• Maintain the GRC risk register and coordinate testing.

Skills

GRC implementation

risk management

ISO 27001 knowledge

SOC 2 Type 2 familiarity

cross-functional collaboration

strong communication

Education

Relevant certifications (CISA, CISM, CRISC)

Tools

GRC tools (Anecdotes, Vanta, Drata, OneTrust)

Job description

A healthcare technology company in Canada is seeking a Governance, Risk, and Compliance (GRC) Lead to drive compliance efforts and shape the function. The ideal candidate has over 8 years of experience in GRC or related fields, with a strong understanding of ISO 27001 and SOC 2 Type 2 standards. This remote-friendly position involves partnering with leaders across multiple entities, making a direct impact on compliance operations. The salary range is $130,000-$150,000, reflecting the candidate's experience and value.