Responsable GRC / Analyste en sécurité
IvaluaSpend Management company
Montreal, CanadaSenior
Tiger Global Management
KKR
Ardian
Hg
Software Engineering
About the role
TL;DR
GRC Manager / Security Analyst to enhance information security program and drive compliance initiatives.
- •Join Ivalua's InfoSec team as a GRC Manager / Security Analyst to enhance our information security program, ensuring robust protection for our clients.
- •This role involves driving GRC initiatives, managing security questionnaires, and supporting compliance efforts.
- •Key Responsibilities Lead and support compliance initiatives across global and regional frameworks (SOC 1/2, ISO 27001, etc.).
- •Evaluate technical controls across the technology stack and translate security requirements into actionable guidelines.
- •Manage client security audits, questionnaires, and contract reviews, particularly for the EMEA region.
- •Participate in meetings with prospects and clients to present Ivalua's security architecture.
- •Drive internal and third-party security risk management processes.
- •Requirements At least 4 years of experience as a GRC Security Analyst.
- •Strong knowledge of security, risk, and compliance frameworks (NIST CSF, ISO 27001, SOC, GDPR).
- •Experience managing audits and risk assessments against InfoSec frameworks.
- •Proficiency in cloud platforms (Azure, AWS, GCP) and security controls.
- •Relevant security certifications (CISSP, CISA, CISM) are desired.
Required skills
SOC 2GDPRRisk ManagementCompliance ManagementAWSAzureGoogle CloudOWASP
Domain expertise
cybersecurity
Benefits & perks
Hybrid work model, Team meals, Training and development programs, International team, Inclusive work environment, Company events
Tech stack
IAMAzureAWSGoogle CloudOWASPGDPR