OverviewEarthDaily Analytics is revolutionizing the way we understand and monitor our planet using cutting‑edge Earth Observation technology and geospatial analytics. We are looking for an experienced Vancouver‑based Governance, Risk, & Compliance (GRC) Manager to establish, maintain, and continuously improve EarthDaily’s governance, risk, and compliance program.ResponsibilitiesOwn the enterprise risk register, conduct risk assessments, and present findings, mitigation plans, and residual risk levels to decision‑makers.Escalate risk acceptance decisions, security variance approvals, and policy exceptions to the appropriate owner based on risk type and organizational impact.Identify gaps in processes, documentation, or controls through stakeholder interviews and process walkthroughs, and take ownership of addressing them with procedures and templates as needed.Manage the policy lifecycle across IT and information security policies, and support Finance and Internal Controls in maintaining ICFR‑related policies.Adapt policy templates to reflect organizational realities while coordinating annual reviews, version control, and approval tracking.Review contractual agreements for GRC‑related requirements and ensure compliance obligations are identified, documented, and tracked.Own the IT general controls (ITGC) component of SOX 302 and 404, including scoping, documentation, management testing, deficiency evaluation, and remediation tracking.Provide IT inputs to disclosure controls and procedures (DC&P;), including IT sub‑certification processes that support public‑company readiness.Contribute to cybersecurity disclosure readiness aligned with Item106 of RegulationS‑K and Item1.05 of Form8‑K.Coordinate periodic tabletop exercises and incident response walkthroughs to validate incident readiness and test the effectiveness of key controls.Collect and organize evidence artifacts to support compliance audits, certification efforts, and public‑company readiness activities, leveraging GRC tooling and pulling data directly from systems when needed.Serve as a primary liaison with internal and external auditors and other advisors, coordinating evidence requests,



walkthroughs, remediation follow‑up, and diligence support.Manage third‑party risk by coordinating vendor security assessments, collecting attestations, and tracking contract security provisions.Coordinate vendor and regional privacy stakeholders to ensure company‑wide alignment on data protection practices.Monitor business and technology initiatives for compliance, cybersecurity, and controls implications, proactively engaging when projects involve customer data, financially relevant systems, new applications, or third‑party integrations.Coordinate periodic privileged access reviews, user access certifications, and other recurring IT general control activities with IT operations.Generate compliance metrics, remediation status, and readiness reports, presenting findings, risks, and recommendations to the Director, IT, the VP, Finance & Internal Controls, and executive leadership in a clear, decision‑useful manner.QualificationsBachelor’s degree in Information Security, Computer Science, Business Administration, Accounting, or a related field; relevant qualified experience and certifications may substitute for formal education.Relevant professional certifications such as CISA, CRISC, CISSP, CISM, or CGRC are preferred.Familiarity with SOX/ICFR (e.G., through co‑sourced internal audit experience or a CPA‑track background) is an asset.5+ years of experience in IT security, risk management, compliance, or audit roles.3+ years of direct experience with GRC programs, policy management, or audit preparation.Demonstrated experience working with industry‑recognized security and compliance frameworks such as SOC2, NISTCSF, or ISO27001,



plus working experience with SOX/ICFR controls.Experience serving as a liaison with external auditors or supporting certification efforts.Working familiarity with SOX Sections302 and404 and IT general controls, ideally through prior support of SOX programs, internal audit testing, or public‑company readiness activities.Bonus: Experience working with GRC platforms such as Vanta, Drata, or ServiceNow.ToolkitStrong knowledge of SOC2, NIST, and ISO27001 frameworks and a practical understanding of how these frameworks intersect with IT general controls and public‑company readiness expectations.Working knowledge of the COSO2013 Internal Control Integrated Framework and the application of SOX302 and404 to IT general controls.Knowledge of identity and access management platforms such as Okta or AzureAD, including the ability to navigate administrative consoles, pull user populations, assess privileged access, and support periodic access review processes.Ability to pull configuration details, audit logs, and compliance‑relevant data from SaaS platforms and organize them into complete, audit‑ready evidence packages.Familiarity with risk assessment methodologies and risk register management.Familiarity with privacy regulations such as GDPR and CCPA, and with cloud security concepts across SaaS, IaaS, and identity platforms.Self‑sufficient and highly organized, with the ability to manage multiple concurrent workstreams and operate independently with minimal oversight.Excellent written and verbal communication, including the ability to convey compliance requirements clearly to technical and non‑technical audiences and prepare concise updates for senior management.Resourceful, persistent, and resilient, with the ability to follow up, escalate when necessary, and drive initiatives forward across competing priorities.Build credibility and productive working relationships across IT, Legal, Finance, Internal Controls, Engineering, and business teams, balancing sound governance with practical execution.Compensation and BenefitsBase Salary: $130,000–$150,000CAD annually (Vancouver, BC).Competitive compensation, full benefits, and flexible time off.#J-18808-Ljbffr

📌 Governance, Risk & Compliance Manager (Vancouver) - C$130,000 - C$150,000 A Year (Winnipeg)
🏢 EarthDaily Analytics
📍 Winnipeg