One of our large clients is looking for a contract GRC Analyst, details are as below:

Estimated Start Date: October 20, 2026. Estimated End Date: June 20, 2027. Hours: 7 Hrs/day. Work Arrangement: Hybrid (2-3 days per week in office). Location: Winnipeg, MB.

Role Description

Support the Cybersecurity GRC framework, including related services, standards, and awareness activities.

Conduct and support cybersecurity risk, third-party, control, audit, regulatory, and compliance assessments, including assisting with the transition to a GRC tool.

Maintain the cybersecurity risk register and track risks, control deficiencies, and exemptions, including supporting the transition to a GRC tool.

Work with the existing GRC team to develop the compliance framework and the corresponding processes and procedures required for monitoring, including collaboration with control owners.

Develop and analyze cybersecurity metrics and key risk indicators to assess program effectiveness and recommend risk treatment strategies.

Qualifications

5-7 years of experience in cybersecurity, risk, compliance, and/or governance.

University or college education,



preferably in Computer Science or a related field, or an equivalent combination of education and experience.

Professional certifications in IT risk, compliance, or security, such as CISA, CISM, CRISC, or CISSP, are considered assets.

Experience with risk assessment methodologies and IT control frameworks such as NIST, ISO, PCI, CIS, and COBIT.

Demonstrated ability to translate policies into actionable operational standards and procedures.

Strong critical thinking and problem-solving skills.

Demonstrated leadership experience and ability to work both independently and in a team workplace.

Experience in IT auditing and technology risk management is an asset.

Previous experience using GRC tools.

Experience facilitating and influencing discussions with diverse stakeholder groups.

Ability to manage multiple priorities and adapt quickly to changing requirements.

Excellent organizational, verbal, and written communication skills.

Knowledge of the lottery and gaming industry is an asset.

#J-18808-Ljbffr

📌 GRC Analyst (Manitoba)
🏢 Zohorecruit
📍 Manitoba