Remote Security GRC Analyst — M&A

Jobgether; Canada; Remote; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote

Job summary

Jobgether is seeking a Security GRC Analyst specialized in Mergers & Acquisitions, based in Canada. You will lead security governance, risk, and compliance across acquired entities, evaluating controls, managing remediation, and coordinating with M&A teams to ensure regulatory alignment and smooth integration.

The role offers remote work from Canada and exposure to complex international acquisitions within a fast-growing fintech environment, with significant ownership and visibility for a

Qualifications

• 5–7 years of professional experience in security governance, IT risk management, or regulatory compliance.
• Direct experience integrating an acquired company into an existing security program.
• Working knowledge of SOX and ICFR IT General Controls (ITGCs) and external audit evidence requirements.
• Practical experience with ISO 27001, SOC 1, SOC 2, and PCI DSS.
• Strong ability to map controls across multiple regulatory/security frameworks and identify gaps.

Responsibilities

• Lead security governance, risk, and compliance activities across newly acquired companies and integrate their control environments.
• Conduct security assessments during due diligence or post-transaction
• Evaluate acquired companies' security posture, including IAM, infrastructure, third-party dependencies, and audit history.
• Prepare comprehensive assessments against security baselines, distinguishing transaction risks from remediation needs.
• Collaborate with M&A Technology teams to communicate findings and plan integrations and resources.
• Map controls to internal security frameworks and identify gaps, overlaps, and alignment opportunities.
• Determine what policies/controls can extend, or require adaptation or new ones for acquired entities.
• Assess control maturity and define remediation milestones with deadlines and owners.
• Prioritize remediation by risk severity and business impact, not just framework requirements.
• Monitor progress and escalate overdue activities or significant risks to Security GRC leadership.
• Prepare risk acceptance proposals with rationale and compensating controls.

Skills

Security governance

IT risk management

Regulatory compliance

M&A integration

SOX/ICFR

ISO 27001

SOC 2

PCI DSS

PKM

Tools

PKM

Job description

Jobgether is seeking a Security GRC Analyst specialized in Mergers & Acquisitions, based in Canada. You will lead security governance, risk, and compliance across acquired entities, evaluating controls, managing remediation, and coordinating with M&A teams to ensure regulatory alignment and smooth integration.

The role offers remote work from Canada and exposure to complex international acquisitions within a fast-growing fintech environment, with significant ownership and visibility for a