Senior GRC Analyst (Information Security)

Location: Hybrid role based in Toronto or Ottawa, Canada, with travel to customer sites and other hirify.global offices where appropriate.

Salary: CA$116K–CA$146K estimated base salary, plus bonus.

Company

hirify.global is a data analytics and enterprise software company that began in FinTech and develops technology for business growth and complex data challenges.

What you will do

• Support the Company Security Officer and perform Alternate Company Security Officer responsibilities under Canadian Government security requirements.
• Manage clearance requests, security briefings, incidents, debriefings, and obligations under the Government of Canada Contract Security Program and Contract Security Manual.
• Identify and implement regulatory, government, contractual, and customer security requirements across policies, controls, and governance frameworks.
• Support customer, government, supplier, audit, certification, and security assurance activities, including assessments, questionnaires, evidence requests, and control testing.
• Track audit findings, control deficiencies, risks, and remediation activities, reporting progress to relevant stakeholders.
• Partner with Legal, Commercial, Privacy, engineering, operational, and global Information Security teams on contractual obligations, risk, compliance, and control effectiveness.

Requirements

• 8+ years of experience in information security governance, risk, compliance, or security assurance across global frameworks and regulated government environments.
• Experience with government security requirements, personnel screening, organizational security, and contractual obligations.
• Experience running security risk assessments, audits, control testing, remediation, control evidence management, and continuous compliance activities.
• Working knowledge of ISO/IEC 27001, SOC 2, NIST SP 800-53 or equivalent, and enterprise or cloud security controls.
• Experience operating within a global security function while owning government-specific requirements.
• Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders and partnering with Privacy and Legal teams.
• Strong communication, technical communication, project management, organizational, and prioritization skills, including the ability to translate complex compliance requirements into practical business guidance.
• An active Government of Canada Secret (Level II) security clearance, or the ability to obtain and maintain it through the Government of Canada Contract Security Program, is required. Successful completion of security screening is a condition of employment.

Nice to have

• Certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor.
• Experience in high-growth FinTech, SaaS, or enterprise software environments.
• Knowledge of PIPEDA and GDPR alongside security frameworks.

Culture & Benefits

• Full-time employment with competitive salary, bonus, annual leave, birthday leave, parental leave, PTO, observed holidays, and well-being days.
• 100% RRSP matching up to 5%, comprehensive benefits, mental health support, fitness reimbursement, and financial well-being benefits.
• Tax-advantageous commuter, healthcare, and dependent-care benefits, plus work-from-home equipment.
• Continuous training and development, a meditation and relaxation subscription, volunteer leave, and team social activities.
• Work from Anywhere policy permits working outside the country of employment for up to two months in a rolling 12-month period.
• Inclusive and accessible recruitment process with reasonable adjustments and accommodations available.