GRC & Security Assurance Specialist

Equisoft; Montreal (administrative region); Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Medical & Dental

Retirement Plan

Telemedicine Program

Employee Assistance Program

Flexible hours

Educational Support (LinkedIn Learning

Equisoft University

Job summary

Equisoft in Montreal is seeking a Specialist, Security Assurance and Compliance to own the security governance program and keep SOC 2 Type II, ISO 27001, ISO 22301, and ISO 42001 current. You’ll drive control activities—access reviews, patching, vulnerability remediation, and pen test follow-up—across teams you don’t manage.

You’ll coordinate with Sales, Legal, and clients as security focal point, ensuring evidence, questionnaires and audits are delivered on time.

Qualifications

• 5+ years in InfoSec GRC or IT audit in software/regulated services.
• Hands-on ownership of at least one full SOC 2 Type II or ISO 27001 cycle.
• Experience with B2B client security questionnaires and due diligence.

Responsibilities

• GRC: Support control environment for SOC 2, ISO 27001, ISO 22301, and ISO 42001; manage policy lifecycle and attestations; prepare evidence packages.
• Vendor & Third-Party Risk: Own DPIA process, vendor intake, risk register, and fourth-party tracking; chase missing certs and remediation commitments.
• Client Security Assurance: Complete due diligence questionnaires and RFP security sections; coordinate client audit evidence requests; issue SOC 2 reports and bridge letters.
• Identity Governance: Own quarterly access reviews; drive automation with managed services partner.
• Vulnerability & Pentest Management: Track findings with Tenable/SentinelOne/UpGuard; drive remediation tickets; coordinate annual pentest.
• Patch & Configuration Hygiene: Generate monthly patching tickets; maintain inventory.
• Security Awareness: Run monthly training cycle and reporting; manage needs survey.
• BCDR Support: Provide DR exercise evidence; support BIA and tabletop exercises.
• Reporting & Automation: Produce KPI reporting; identify manual work suitable for automation and build workflows.

Skills

InfoSec GRC

IT audit

French & English bilingual

Tools

Tenable

SentinelOne

UpGuard

Job description

Equisoft in Montreal is seeking a Specialist, Security Assurance and Compliance to own the security governance program and keep SOC 2 Type II, ISO 27001, ISO 22301, and ISO 42001 current. You’ll drive control activities—access reviews, patching, vulnerability remediation, and pen test follow-up—across teams you don’t manage.

You’ll coordinate with Sales, Legal, and clients as security focal point, ensuring evidence, questionnaires and audits are delivered on time.