GRC Security Analyst - Governance, Risk, and Compliance

London Health Sciences Centre; City Of London; Remote; GBP 60,000 - 80,000; Full time

Job summary

A prominent health services institution in London is seeking a GRC Security Analyst to support their cybersecurity strategy. The role involves enhancing the hospital's security posture and managing cybersecurity projects. Candidates should possess a relevant diploma or degree and ideally have three years of experience. Additional certifications such as CISSP are preferred. This role requires effective communication and analytical skills. The position is primarily remote with the potential for on-site work as needed.

Benefits

Health and Dental Benefits

Pension Plan

Career development and training opportunities

Employee Wellness Initiatives

Qualifications

• Minimum of three years of relevant experience.
• ISC2 Certified Information Systems Security Professional (CISSP) preferred.
• Certification Governance Risk & Compliance (CGRC) preferred.

Responsibilities

• Support the security direction of the business.
• Recommend modifications to corporate policies.
• Work on small to medium-scale cybersecurity projects.

Skills

Outstanding communication skills

Strong analytical and critical thinking skills

Detail-oriented

Strong organizational skills

Ability to provide leadership expertise

Knowledge of health care digital systems

Ability to integrate business and financial acumen

Education

Community college diploma in Cybersecurity or Governance Risk & Compliance

Bachelor's degree in computer science, Engineering or Legal/Business

Master's degree in computer science, Engineering or Legal/Business

Job description

Open: November 20, 2025

Deadline: December 3, 2025

Non-Union

Reason for Posting: New Vacancy

Department Name

ITS Governance, Risk and Compliance

The Governance, Risk and Compliance (GRC) Security Analyst is responsible supporting the security direction of the business and elevating the Hospital's security posture. The GRC Security Analyst is expected to support the security strategy of the Hospital within new and existing information system capabilities. The GRC Security Analyst possess sound knowledge of enterprise risk management with experience in cybersecurity. The GRC Security Analyst is also responsible for recommending to the Senior GRC Security Analyst new, and modifications to existing, corporate policies and maintenance in supporting the Hospital's security posture. Under an agreement with Ontario Health, LHSC is providing cybersecurity risk assessment services for up to 40 separate health care organizations across the province of Ontario. The GRC Security Analyst works on small to medium scale projects, each typically within a single organization.

What we offer:

Status: Regular Full-time

Hours of Work: 37.5 hours per week

Rate of Pay: $39.29 per hour to $49.12 per hour

Health and Dental Benefits & Pension Plan (HOOPP)

Career development and training opportunities

Employee Wellness Initiatives

Qualifications

• Community college diploma in Cybersecurity or Governance Risk & Compliance (GRC)
• Bachelor's degree in computer science, Engineering or Legal/Business preferred
• Master's degree in computer science, Engineering or Legal/Business preferred
• Minimum of three years of relevant experience
• ISC2 Certified Information Systems Security Professional (CISSP) preferred
• Certification Governance Risk & Compliance (CGRC) preferred
• Outstanding communication (verbal and written) skills
• Strong analytical and critical thinking skills
• Detail-oriented
• Strong organizational skills
• Knowledge of health care digital systems (e.g., Health Information Systems) in Ontario preferred
• Strong knowledge and experience with the application of privacy legislation preferred
• Experience with financial risk management preferred
• Ability to provide leadership expertise while also serving as a team-player
• Ability to integrate business and financial acumen with technical leadership
• Demonstrated practice and commitment to the principles of patient and family centered care
• Demonstrated practice and commitment to patient and staff safety at LHSC
• Demonstrated practice and commitment to LHSC's vision, purpose and values
• Demonstrated ability to attend work on a regular basis

Has your experience been obtained through alternative pathways? LHSC acknowledges that skills, education and lived experience come in many forms and may have been developed differently from those listed in the job posting. Although LHSC has discretion in determining whether a candidate meets the qualifications and licensing requirements, we welcome applications from those with different experiences who may not meet every requirement listed. Tell us your story and apply today with your resume!

LHSC does not use artificial intelligence (AI) to screen, assess or select applicants for a position.

Teaching, Learning and Research

London Health Sciences Centre is proudly one of Canada's largest acute-care teaching and research hospitals. LHSC has an unwavering commitment to lifelong learning, with education agreements in collaboration with over 55 schools, hospitals, and community agencies from across Ontario, Canada and internationally; among our many education partners, our three regional partners are Western University, Fanshawe College, and Thames Valley District School Board. LHSC provides students with a place where they can learn and discover knowledge and skills to take them forward in their careers as health care professionals. Approximately 2,900 Nursing, Allied Health and other students ranging from secondary school to university graduate level programs receive training at LHSC every year. As an employee of LHSC, you will be expected to engage in role-related teaching, professional development, and research activities in addition to standard position duties and responsibilities.

If interested in this role, please apply with a resume that outlines all current and previous experience relevant to the position.

We are committed to providing a safe, healthy and inclusive work environment that inspires respect. LHSC is committed to employment equity and diversity in the workplace and welcomes applications from equity-denied groups including Indigenous people, racialized people, women, persons with disabilities, and 2SLGBTQIA+ persons. LHSC is also committed to ensuring an accessible and inclusive recruitment process.

Upon individual request, we will endeavor to remove any barrier to the hiring process to reasonably accommodate candidates, including those with disabilities, while maintaining a fair, consistent and equitable recruitment approach.

Should any applicant require accommodation through the application, interview or selection processes, please contact Recruitment Services at 519-685-8500, extension #34321 or [e-mail].

Immunization Requirements

Before beginning employment at LHSC, all new hires must provide documentation related to LHSC's Health Review requirements. For more information and a detailed list of requirements, please visit Health Review Requirements LHSC .

Work Permit

Please be advised, if you are seeking employment on a temporary work or study permit, we recommend reviewing work permit restrictions as it applies to healthcare organizations in Canada. As per the Government of Canada, LHSC is considered a hospital/healthcare organization, even if an employee is functioning in a non-patient facing role. Individuals on a work or study permit seeking employment in this sector may be required to complete additional steps in the process, including but not limited to a medical exam, which may also apply to employees looking to renew their work permits. It is the employee's accountability to ensure they are adhering to their specific work permit restrictions, and we encourage all candidates and LHSC employees to be proactive and review restrictions as soon as possible as it could be a lengthy process.

Remote Work

Please note that while this position is primarily remote, work arrangements are subject to change based on organizational needs and may require occasional or future on-site presence.