Senior GRC Engineer

Jobgether; Canada; Remote; CAD 120,000 - 145,000; Full time

Benefits offered by this job

Medical coverage

Dental and vision coverage

Disability insurance

Life insurance

Retirement plan

Paid time off

Wellness program

Remote-first environment

Learning and development

Collaborative culture

Job summary

Jobgether is seeking a Senior GRC Engineer to lead enterprise-wide governance, risk, and compliance initiatives in a remote-first environment in Canada. You’ll oversee audit remediation across SOC 2, TISAX, and DORA, driving process improvements and reporting to leadership.

You will develop and maintain control frameworks, manage POAMs, and coordinate with business units and external auditors to ensure strong risk posture and audit readiness.

Qualifications

• 7+ years in Governance, Risk, and Compliance (GRC), audit, or compliance roles.
• Experience managing multiple concurrent audit engagements and remediation initiatives.
• Hands-on with SOC 2, ISO 27001, and enterprise audit processes.
• Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard.
• Strong IT controls, information security frameworks, and risk management methodologies.
• Excellent written and verbal communication for audit coordination and reporting.
• Experience developing governance metrics and KRIs and dashboards.
• Ability to coordinate across business units and external auditors.
• Strong organizational and project management skills.

Responsibilities

• Lead governance, risk, and compliance activities across multiple frameworks, driving audit readiness and remediation.
• Manage enterprise risk assessment, risk registers, and risk acceptance reviews.
• Direct audit evidence collection, control documentation, findings resolution, and audit coordination.
• Develop governance metrics, KRIs, and reporting dashboards for executives and customers.
• Build and maintain enterprise control frameworks aligned with obligations and customer needs.
• Manage POAMs, track remediation progress, and oversee vulnerability governance.
• Coordinate compliance activities with business units, leadership, and external auditors.
• Communicate audit progress, findings, risk exposure, and remediation priorities to stakeholders.
• Establish sustainable compliance processes to reduce remediation backlogs.

Skills

GRC experience

Audit coordination

Communication skills

Project management

Regulatory knowledge

Risk assessment

Stakeholder management

Security controls

Education

CISSP

CISM

CRISC

Tools

ServiceNow

Archer

AuditBoard

Job description

The Senior GRC Engineer will lead enterprise-wide governance, risk, and compliance initiatives, ensuring the organization meets critical security standards and regulatory obligations. You will oversee active audit and remediation programs across frameworks such as SOC 2, TISAX, and DORA, helping resolve findings within strict deadlines. Working closely with business units, executives, and external auditors, you will strengthen control environments and improve transparency around organizational risk. You will also develop governance metrics and reporting dashboards that provide clear, reliable insights to customers and senior leadership. This role offers the opportunity to move compliance practices from reactive remediation toward proactive risk management. Join a remote-first environment where accountability, collaboration, and data-driven decision-making are central to the work.

Accountabilities

You will take ownership of governance, risk, and compliance activities across multiple enterprise frameworks, driving audit readiness, remediation, and continuous improvement. Your responsibilities will include:

• Lead SOC 2, TISAX, and DORA audit remediation initiatives, ensuring findings are addressed within established deadlines.

• Manage enterprise risk assessment and treatment processes, including maintaining risk registers and coordinating risk acceptance reviews.

• Direct audit evidence collection, control documentation, finding resolution, and audit coordination across applicable frameworks.

• Develop and maintain governance metrics, Key Risk Indicators (KRIs), and reporting dashboards for customers, executives, and board-level stakeholders.

• Build, maintain, and improve enterprise control frameworks aligned with regulatory obligations, security standards, and customer requirements.

• Manage Plans of Action and Milestones (POAMs), track remediation progress, and oversee vulnerability remediation governance.

• Coordinate compliance activities with business units, executive leadership, and external audit partners.

• Communicate audit progress, outstanding findings, risk exposure, and remediation priorities to relevant stakeholders.

• Establish sustainable compliance processes that reduce remediation backlogs and strengthen ongoing audit readiness.

• Promote a proactive risk management approach through accurate reporting, clear accountability, and continuous improvement.

Requirements

The ideal candidate combines extensive GRC experience with strong technical knowledge of security controls, audit frameworks, and enterprise risk management. They should be comfortable managing several compliance initiatives simultaneously and communicating complex risk matters to both technical and executive audiences. Key qualifications include:

• At least 7 years of experience in Governance, Risk, and Compliance (GRC), audit, or compliance engineering roles.

• Demonstrated success managing multiple concurrent audit engagements and remediation initiatives.

• Extensive hands-on experience with SOC 2, ISO 27001, and enterprise audit processes.

• Proficiency with GRC platforms such as ServiceNow, Archer, AuditBoard, or equivalent tools.

• Strong technical understanding of IT controls, information security frameworks, and risk management methodologies.

• Excellent written and verbal communication skills, particularly for audit coordination, exception tracking, and executive or board-level reporting.

• Experience developing governance metrics, Key Risk Indicators (KRIs), and dashboards that clearly communicate organizational risk posture.

• Ability to coordinate effectively across business units, leadership teams, and external auditors.

• Strong organizational and project management skills, with the ability to prioritize remediation activities and deliver against fixed deadlines.

Preferred qualifications:

• CISSP, CISM, or CRISC certification.

• Experience with DORA, PCI DSS 4.0, or other European regulatory frameworks.

• Background in B2B SaaS compliance and customer audit programs.

• Experience managing multiple concurrent audit frameworks and regulatory examinations.

• Legal authorization to work in Canada is required. Employment sponsorship is not provided.

Benefits

• Annual starting salary range of CAD 120,000-145,000 for Canada-based employees.

• Compensation determined by relevant skills, education, qualifications, experience, performance, organizational needs, and geographic location.

• Potential eligibility for medical, dental, and vision coverage.

• Disability and life insurance programs.

• Retirement savings programs.

• Paid time off.

• Wellness programs.

• Additional company-sponsored benefits, depending on country and employment status.

• Remote-first working environment with flexible work arrangements.

• Learning and professional development opportunities.

• Collaborative culture focused on innovation, accountability, customer success, and data-driven decision-making.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.