Cybersecurity risk and compliance expertise support Aviso’s assurance programs, control testing, and regulatory monitoring. This experienced Security GRC Specialist role reports to the Director of Security Governance, Risk & Compliance.

You will assess risks across infrastructure, applications, third parties, and critical processes. The position supports cybersecurity policies, industry framework alignment, internal and external audits, and control effectiveness reviews. You will also monitor remediation, prepare metrics, and maintain GRC processes through platforms such as Archer, ServiceNow GRC, or Resolver.

Key Responsibilities:

- Assess infrastructure, application, third-party, and process risks
- Monitor compliance with regulatory and control requirements




- Conduct periodic design and operating effectiveness testing
- Review vendor risk assessment questionnaire responses
- Prepare cybersecurity metrics for senior leadership

Requirements:

- Five to eight years of relevant risk, audit, or compliance experience
- Degree in information security, computer science, business, or related field
- Working knowledge of IT governance standards and frameworks
- Familiarity with regulatory and compliance requirements
- Fluent English; French bilingual skills are an asset

Apply cybersecurity risk, audit, compliance, and control testing experience across Aviso’s security governance programs.

📌 Cybersecurity Risk Compliance Analyst (Toronto)
🏢 Aviso
📍 Toronto