Governance, Risk & Compliance ManagerVancouver, BC | Hybrid (3-4 days in-office) | CAD $85,000-$110,000 / year | Full-timeAbout MonachusMonachus helps early-stage startups build scalable systems for compliance, security, and operations. Without the chaos. We're a small, high-trust team based in Vancouver, BC, and our clients are spread across North America. We work closely with founders and technical teams who are moving fast and need security and compliance done right, not just done. "Monachus" is Latin for monk, meaning diligent, dedicated, wise. If you care about doing high-quality work, being hands-on in the world of compliance, learning constantly, and having real ownership over outcomes, this is the kind of place where that actually happens.The RoleWe're hiring a GRC Manager who brings structure, precision, and strategic thinking to every client engagement. You'll be the person startups turn to when they need to navigate SOC 2, ISO 27001, and vendor assessments with confidence, and the person internally who helps us run tighter, smarter processes.This is a full-time, hybrid role based in Vancouver. At six months, success looks like: clients trust you, and timelines are moving in an environment where the pace is real and clients' expectations are high. If you do your best work with structure and autonomy in equal measure, this is the right setting for you.What You'll DoLead audits from start to finish. Manage SOC 2, ISO 27001, and related projects.Act as a trusted partner. Communicate clearly and proactively with clients.Own the details. Track timelines, gather evidence, validate remediations, and keep things moving.Make informed decisions. Assess risk and advise on compliance posture.Respond to vendor requests. Complete RFPs and questionnaires with accuracy and speed.Write meaningful policies. Draft SOPs and frameworks that reflect real operations.Train and guide.



Deliver tailored compliance education for teams.Streamline where possible. Spot opportunities to improve processes and make things more efficient without overcomplicating.Collaborate across teams. Work with auditors, founders, and technical stakeholders.Stay informed. Track regulatory changes and help clients stay ahead.What We're Looking ForExperience & BackgroundHave 5+ years leading compliance audits (SOC 2, ISO 27001, etc.)Have worked with US-based clients and understand industry-standard cybersecurity frameworksHave experience responding to vendor assessments and security questionnairesCommunicate clearly with both technical and non-technical audiencesThink strategically and can explain the "why" behind your recommendationsUnderstand startup environments and can adapt your approach accordinglyHave a bachelor's degree in business, tech, or a related field (Master's preferred)Enjoy improving processes and finding leaner ways to get things doneTools & SystemsAre comfortable using structured systems like task trackers to manage workKnow your way around cloud infrastructure, SDLC, and compliance toolingCulture Fit Matters at MonachusYou’ll Thrive Here If YouConstantly look for ways to improve systems, workflows, and delivery qualityCollaborate well and prioritize alignment over egoCan take direction, follow operating systems, and improve them instead of fighting themMove fast without sacrificing qualityTake ownership and operate with high accountabilityEnjoy building scalable processes and improving how work gets doneAre curious about new tools and technologies and actively experiment with AI to improve how work gets doneWhy MonachusDirect impact with startup founders and leadership teamsSmall, high-trust team with autonomyStrong focus on quality, structure, and continuous improvementWork that values originality, depth, and thoughtful execution over shortcuts or templatesIf you want to operate as both a security leader and execution powerhouse, this role is built for you

📌 Governance, Risk & Compliance Manager - C$85,000 - C$110,000 A Year (Vancouver)
🏢 Monachus
📍 Vancouver