GRC Analyst II (SaaS)

TL;DR

GRC Analyst II (SaaS): Managing core GRC program areas and supporting security initiatives with an accent on risk, audit, and compliance. Focus on maintaining data classification, conducting vendor security assessments, and driving process improvements across the organization.

Location: Remote-first model. Must be based in the US, Canada, UK, Philippines, or Romania. Hiring is currently unavailable in Quebec Province, Northern Ireland, and Hawaii.

Salary: CA$62,860 – CA$94,290

Company

hirify.global is a pioneer in compensation intelligence, combining market data with AI-powered technology to help organizations make smarter pay decisions.

What you will do

• Maintain data classification programs, including schema, tagging standards, and coordination with data owners.
• Manage system classification and ownership inventory to ensure accurate attribution and review.
• Support audit coordination activities for SOC 2 and other compliance frameworks.
• Conduct vendor security assessments and manage third-party risk workflows.
• Oversee the policy management lifecycle, including drafting, version control, and approval coordination.
• Identify control gaps and partner with business units to implement effective process improvements.

Requirements

• Bachelor's degree in cybersecurity, information systems, or a related field.
• 2-4 years of work experience in GRC, information security, or a related field within a commercial SaaS or software company.
• Working knowledge of information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS.
• Demonstrated experience with data classification frameworks and data governance concepts.
• Hands-on experience with GRC tools or platforms like Drata or ServiceNow GRC.
• Must be located in an eligible region (US, Canada, UK, Philippines, or Romania) and not in excluded areas (Quebec, Northern Ireland, Hawaii).

Culture & Benefits

• Comprehensive medical, dental, and vision coverage.
• RRSP program with a 1:1 match up to 4%.
• 16 weeks of paid parental leave.
• Annual remote work stipend for home office equipment or wellness.
• Access to continued learning and development opportunities.
• Inclusive culture with active Employee Resource Groups and volunteer programs.