About FullscriptWe’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.This is your invitation.Bring your ideas, your grit, and your care for people.Join us and shape the future of care.Fullscript is currently looking for aGRC Analyst (Risk)to join our growing Security team and help establish and scale foundational risk management practices across the organization. The Security team is responsible for product security, governance, risk, compliance, as well as security operations and incident response.This role is critical to evolving Fullscript’s risk management approach from an ad hoc, reactive model to a structured, proactive, and measurable enterprise risk program. You will work closely with teams across Fullscript to identify, assess, and track security and operational risks, while providing leadership with clear visibility into the company’s risk posture.What you’ll doEnterprise Risk ManagementIdentify, document, and assess security and operational risks across business unitsMaintain a comprehensive and up-to-date enterprise risk registerApply a consistent methodology for evaluating risk likelihood, impact, ownership, and treatmentPartner with risk owners to ensure risks are clearly articulated and appropriately managedRisk Governance & Decision SupportEnsure risk acceptance, mitigation, and transfer decisions are documented, traceable, and aligned with Fullscript’s risk appetiteTrack remediation efforts and follow up with stakeholders to ensure timely risk reductionProduce clear,



data-driven risk reporting and dashboards to support leadership and executive decision-makingThird-Party Risk ManagementSupport and manage Fullscript’s third-party risk management programConduct risk assessments for vendors and partners, including onboarding and periodic reviewsCollaborate with Procurement, Legal, Security, and Engineering to ensure third-party risks are identified and addressedCross-Functional CollaborationPartner with Security, Engineering, IT, Legal, Compliance, and business teams to surface emerging risksAct as a trusted partner and advisor on risk-related questions across the organizationHelp drive clarity around risk ownership and accountabilityProgram Development & Continuous ImprovementHelp define, document, and refine risk management processes, standards, and proceduresContribute to policies and controls that support effective risk governanceSupport audit, compliance, and regulatory activities by providing risk context and evidenceWhat you bring to the tableRisk & GRC FoundationsExperience in governance, risk management, compliance, security operations, IT risk, or a related fieldUnderstanding of security and operational risk concepts and common risk management frameworksAbility to assess technical and non-technical risks and translate them into business impactAnalytical & Communication SkillsStrong analytical and problem-solving skills, with the ability to identify patterns and trends in risk dataExperience creating clear documentation, reports, and dashboards for technical and non-technical audiencesStrong verbal and written communication skillsCollaboration & Growth MindsetAbility to work cross-functionally and influence without direct authorityWillingness to ask questions, seek feedback, and continuously improve processesComfortable operating in a growing,



evolving environment where programs are being built and scaledJudgment & Decision-MakingStrong situational awareness and judgment when evaluating risk trade-offsAbility to support and influence risk decisions with data and contextBonus if you haveExperience with third-party risk management programsFamiliarity with frameworks such as NIST, ISO 27001, SOC 2, CIS, or HITRUSTExperience supporting audits or executive and board-level risk reportingBackground in security operations, compliance, or incident responseWhat we can offer youGenerous PTO and competitive payFullscript’s RRSP match program for financial healthFlexible benefits package and workplace wellness programTraining budget and company-wide learning initiativesDiscount on Fullscript catalog of productsAbility to work Wherever You Work Well*Compensation rangeThe salary range for this role is between $100,000 and $120,000 CAD. Fullscript shares salary ranges to support transparency and help candidates make informed decisions. The range shown reflects base salary only and does not include stock options, wellness stipends, or other benefits that are part of Fullscript’s total rewards package.Final compensation depends on experience, skills, and location. We review pay regularly to stay aligned with market data and internal equity. Benefits and total rewards may vary by region.Why FullscriptGreat work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.What to Know Before You ApplyWe’re grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page. We’re not able to respond to individual messages about open roles on email or social channels.Fullscript is an equal prospect employer committed to creating an inclusive workplace. Accommodations are available upon request at [email protected] offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.Learn More#J-18808-Ljbffr

📌 Grc Analyst - C$100,000 - C$120,000 A Year - Remote (Toronto)
🏢 Fullscript
📍 Toronto