Contract through January 29, with a solid possibility of extension.

Hybrid, 3 days in office in Mississauga.

40 hours / week

Our large enterprise retail client is seeking a Intermediate GRC Analyst with 7+ years of experience to support TPRM automation and SOC 2 initiatives within their Cyber Security and Compliance team.

This role focuses primarily on TPRM governance, including vendor onboarding, risk assessments, and coordination activities tied to current manual processes that are actively being automated using GenAI.

As automation matures over the coming months, the resource will transition into SOC 2, KRIs, and issue management work, providing broad cross-functional exposure across the GRC function.

Responsibilities
Manage TPRM governance activities including vendor intake, profile creation, questionnaire generation, and risk assessment coordination
Troubleshoot vendor access and questionnaire login issues
Support automation initiatives for TPRM intake, profile generation, and inherent risk assessment processes




Design and document future state workflows to replace current manual processes
Work with business stakeholders to develop and track remediation plans
Support SOC 2, KRIs, issue management, and ICFR activities as needed

Must Haves
7+ years in Cyber Security, GRC, or TPRM (Third-party risk management) environments
Hands-on TPRM experience including vendor onboarding, risk assessments, questionnaire management, and governance coordination
SOC 2 knowledge and experience supporting security assessments and remediation planning
Ability to design future state workflows and improve manual processes through automation
Experience working with the business to develop and track remediation plans
Solid cross-functional communication and stakeholder management skills

Nice to Haves
ICFR exposure
Familiarity with GenAI tools for process automation (ChatGPT Enterprise or similar)
KRI tracking and issue management experience

Required Skill Profession

Computer Occupations

📌 Intermediate Grc Analyst Tprm / Soc 2 / Vendor Risk Governance Toronto
🏢 S.i. Systems
📍 Toronto