About Miovision:

At Miovision, we’re unlocking transportation networks that move you. Our vision and mission is to enable smart, fast, safe communities that simply flow, as we drive the Intelligent Mobility Revolution. Backed by the world’s most advanced traffic AI, Miovision’s innovations in traffic signal planning and operations are making it possible for cities to improve the transportation experience for drivers, cyclists and pedestrians.

Our values drive us. They’re at the core of everything we do. If they align with yours, proceed through the GREEN light

- All in to win: We're driven by a winning mindset, approaching every challenge with intensity, clarity, and speed.

- One Miovision: We succeed as one team, uniting diverse talents, building on trust, and putting our shared mission before ego.

- Be better every day: We're committed to continuous growth, staying curious, building mastery, and embracing challenges as learning opportunities.

- Make it happen: We are proactive and results-driven, taking ownership, acting with urgency, and focusing on solutions that deliver real impact.

- Earn the customer: We are deeply customer-centric, focused on earning our customers' partnership every day by delivering exceptional experiences that drive their success.

Position Summary:

At Miovision, we are engineering the future of smart transportation, but keeping our massive data highways safe requires serious guardrails. We are looking for a GRC Specialist to act as our ultimate risk traffic controller. Sitting within the Office of Cybersecurity, you will operationalize our Unified Risk Management Framework,



ensuring our products, cloud platforms, and enterprise systems navigate the complex intersections of global industry standards without ever hitting a compliance roadblock. If you are ready to steer our risk registers, keep our audit readiness cruising in the fast lane, and ensure security is a green light for business growth rather than a bottleneck, buckle up and merge into our team

Objectives and Responsibilities:

Risk & Control Execution

- Identify, assess, and track enterprise, cyber, product, and third-party risks, actively expanding our cybersecurity risk universe.

- Maintain risk scoring, treatment plans, and evidence in strict alignment with frameworks like ISO 27001, SOC 2, and NIST.

- Drive risk remediation and manage risk acceptance workflows, ensuring clear justifications and proper executive approvals.

Governance, Risk & Compliance (GRC) Program Operations

- Drive day-to-day GRC operations across ISO 27001, SOC 2, and NIST, intelligently mapping controls to eliminate duplication and boost efficiency.

- Collect and validate rock-solid evidence for internal assessments while managing the lifecycle of our security policies and standards.

- Proactively research, recommend,



and implement high-impact process improvements to streamline compliance efforts.

Audit & Assurance Support

- Bridge the gap between theoretical certification requirements and operational reality by building robust audit playbooks and practical controls.

- Serve as a key player during critical external audits, coordinating with internal control owners to ensure lightning-quick, highly accurate evidence submission.

- Craft accurate, confident responses to customer security questionnaires, RFPs, and due-diligence requests to accelerate sales.

Cross-Functional Enablement

- Partner with Engineering, Cloud Ops, IT, and Product to seamlessly embed risk considerations into development, operations, and vendor onboarding.

- Act as a key risk gatekeeper for product releases and major delivery milestones, operationalizing highly scalable security controls.

- Drive highly engaging security awareness training and explicit risk communications across the entire business.

Risk Culture & Cross-Functional Engagement

- Champion security best practices and act as an approachable advocate to non-technical, cross-departmental teams.

- Spearhead engaging initiatives that build and reinforce a highly resilient, company-wide security culture.

- Actively participate in cross-functional risk forums and working groups to keep security top-of-mind across the organization.

Emerging Leadership & Development

- Take total ownership of key GRC components (like third-party risk or policy governance) to continuously hone your skills as an independent practitioner.

-

📌 GRC Specialist (Canada)
🏢 Miovision
📍 Canada