One of our large clients is looking for a contract GRC Analyst, details are as below:

Engagement Details

Estimated Start Date: October 20, 2026

Estimated End Date: June 20, 2027

Hours: 7 Hrs/day

Work Arrangement: Hybrid (2-3 days per week in office)

Location: Winnipeg, MB

Role Description

- Support the Cybersecurity GRC framework, including related services, standards, and awareness activities.
- Conduct and support cybersecurity risk, third-party, control, audit, regulatory, and compliance assessments, including assisting with the transition to a GRC tool.
- Maintain the cybersecurity risk register and track risks, control deficiencies, and exemptions, including supporting the transition to a GRC tool.
- Work with the existing GRC team to develop the compliance framework and the corresponding processes and procedures required for monitoring, including collaboration with control owners.
- Develop and analyze cybersecurity metrics and key risk indicators to assess program effectiveness and recommend risk treatment strategies.

Expected Deliverables

- Risk assessments
- Compliance program documentation
- GRC tool outputs

Qualifications

- 5-7 years of experience in cybersecurity, risk, compliance,



and/or governance.
- University or college education, preferably in Computer Science or a related field, or an equivalent combination of education and experience.
- Professional certifications in IT risk, compliance, or security, such as CISA, CISM, CRISC, or CISSP, are considered assets.
- Experience with risk assessment methodologies and IT control frameworks such as NIST, ISO, PCI, CIS, and COBIT.
- Demonstrated ability to translate policies into actionable operational standards and procedures.
- Robust critical thinking and problem-solving skills.
- Demonstrated leadership experience and ability to work both independently and in a team environment.
- Experience in IT auditing and technology risk management is an asset.
- Previous experience using GRC tools.
- Experience facilitating and influencing discussions with diverse stakeholder groups.
- Ability to manage multiple priorities and adapt quickly to changing requirements.
- Excellent organizational, verbal, and written communication skills.
- Knowledge of the lottery and gaming industry is an asset.

📌 GRC Analyst (Winnipeg)
🏢 Strategize It
📍 Winnipeg