GRC/Compliance Lead - Canada

Inviso Corporation; California (MO); Hybrid; CAD 110,000 - 170,000; Full time

Benefits offered by this job

Annual training allowance

Paid time off

Paid holidays

Job summary

Inviso Corporation seeks a remote, client-facing GRC Lead to support an external software development organization within Inviso’s delivery team. You will help establish practical governance, risk, and compliance practices for a multi-tenant enterprise AI platform, focusing on SOC 2 and ISO readiness, controls, and audit preparation.

The ideal candidate partners with engineering, security, and auditors, addressing data handling and customer assurance needs while enabling credible delivery

Qualifications

• Experience owning or supporting a security, governance, risk, or compliance program in a B2B SaaS, platform, or enterprise software environment.
• Experience with SOC 2, ISO 27001, or similar compliance frameworks.
• Ability to define controls, map requirements, collect evidence, track gaps, and support audit readiness.
• Experience preparing customer-facing security documentation, security questionnaires, DPAs, policies, or compliance materials.
• Ability to partner with engineering and security teams to make controls practical, repeatable, and automation-friendly.
• Experience advising on data handling, retention, access control, regulatory obligations, and customer assurance needs.
• Ability to prepare for and support audits, customer security reviews, and compliance assessments.
• Strong documentation, organization, follow-through, and stakeholder management skills.
• Strong communication and collaboration skills for client-facing consulting environments.
• Pragmatic mindset with the ability to support delivery while maintaining credible compliance standards.

Responsibilities

• Help define, operate, and mature a compliance program for a multi-tenant enterprise platform.
• Focus on SOC 2 and ISO readiness, controls, evidence collection, and audit preparation.
• Prepare customer-facing security documentation, questionnaires, DPAs, and policies.
• Partner with engineering and security teams to implement practical, automated controls.
• Support audits, customer security reviews, and compliance assessments with stakeholders.

Skills

SOC 2 experience

ISO 27001 experience

Controls mapping

Audit readiness

Security documentation

Evidence collection

Automation-friendly controls

Data handling & access

Stakeholder management

Client-facing consulting

Job description

This is a remote, client-facing consultant role with Inviso. In this position, you will support an external software development organization as part of Inviso’s delivery team, helping establish practical, engineering-friendly governance, risk, and compliance practices for an enterprise AI platform.

The Inviso GRC / Compliance Lead is responsible for helping define, operate, and mature a compliance program for a multi-tenant enterprise platform serving regulated and mission-critical customer environments. This role focuses on SOC 2 and ISO readiness, controls, evidence collection, customer security documentation, audit preparation, data handling, and compliance-by-design.

The ideal candidate understands how to build credible compliance practices without slowing delivery. This role requires strong partnership with engineering, security, product, auditors, customer security teams, and client stakeholders.

This is a 100% remote role but may require some travel due to client needs.

Experience & Skills Required

• Experience owning or supporting a security, governance, risk, or compliance program in a B2B SaaS, platform, or enterprise software environment.
• Experience with SOC 2, ISO 27001, or similar compliance frameworks.
• Ability to define controls, map requirements, collect evidence, track gaps, and support audit readiness.
• Experience preparing customer-facing security documentation, security questionnaires, DPAs, policies, or compliance materials.
• Ability to partner with engineering and security teams to make controls practical, repeatable, and automation-friendly.
• Experience advising on data handling, retention, access control, regulatory obligations, and customer assurance needs.
• Ability to prepare for and support audits, customer security reviews, and compliance assessments.
• Strong documentation, organization, follow-through, and stakeholder management skills.
• Strong communication and collaboration skills for client-facing consulting environments.
• Pragmatic mindset with the ability to support delivery while maintaining credible compliance standards.

Desired Qualifications

• Experience taking a company or product through SOC 2, ISO 27001, or a comparable certification process.
• Experience automating evidence collection or integrating compliance into engineering workflows.
• Familiarity with GDPR or other major data protection and privacy regimes.
• Experience with AI governance, responsible AI practices, model risk, data governance, or compliance for AI-enabled products.
• Experience with enterprise-scale B2B SaaS, regulated customer environments, or mission-critical software.
• Relevant compliance, audit, security, privacy, or risk certifications are a plus.

Success Criteria

Success in this role is measured by practical compliance execution, audit readiness, clear evidence management, effective customer assurance, and the ability to help client teams build compliance into the platform from the start. GRC / Compliance Leads are expected to reduce risk, improve customer trust, and support credible delivery without creating unnecessary friction.

In addition to the base pay, Inviso provides an annual $2,000 training allowance to all of its employees, plus paid time off, paid holidays, and other benefits.

• Our commitment to excellence is interwoven with the way we care about our people. Our low attrition rate, high average employee tenure, and the number of people that have been with Inviso for 10, 15, even 20 years, speaks volumes to who we are as a company.
• We are a meritocracy through and through. Those who excel, grow. There is no ceiling, we don’t tolerate politics.
• Inviso has maintained a deep, well-established relationship with Microsoft for over 20 years. We are a top-rated supplier and are proud to be a Managed Partner with many credentials.