Governance, Risk and Compliance Analyst
Posted 18ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
GRC Analyst at CapIntel improving information security and compliance. Collaborating with multiple departments ensuring audit readiness and regulatory alignment.
Responsibilities:
- Support CapIntel’s Governance, Risk, and Compliance program
- Maintain and improve security policies, standards, and procedures to support the ongoing maturity of CapIntel’s Information Security Program.
- Maintain the company’s risk register, including tracking remediation activities and providing regular updates on risk posture.
- Support SOC 2 and other compliance initiatives by assisting with control design, coordinating evidence collection, and supporting internal and external audits.
- Track audit findings and remediation actions to ensure issues are resolved in a timely manner and controls remain effective.
- Execute vendor security assessments and due diligence reviews, maintain the vendor risk register, and track remediation of identified risks.
- Serve as the primary point of contact for customer and prospect security questionnaires, maintaining a library of standardized responses and coordinating with internal teams when needed.
- Participate in customer security discussions or audits to represent CapIntel’s security posture.
- Assist the Security Incident Response Team (SIRT) during incidents by coordinating documentation, timelines, and communications.
- Support the maintenance and testing of Business Continuity and Disaster Recovery plans and track post-incident action items.
- Assist with privacy and data protection initiatives, including data mapping, data handling reviews, and breach response coordination in partnership with Legal and Security leadership.
- Support CapIntel’s security awareness program by coordinating training campaigns, phishing simulations, and tracking participation metrics.
Requirements:
- Experience in governance, risk, compliance, information security, or audit-related roles
- Experience supporting security or compliance programs such as SOC 2, NIST CSF, ISO 27001, or similar frameworks
- Exposure to audit processes, including evidence collection, control documentation, or audit coordination
- Familiarity with risk management concepts, including maintaining risk registers or tracking remediation activities
- Experience completing or coordinating customer security questionnaires is an asset
- Strong organizational and project management skills, with the ability to manage multiple compliance workstreams and deadlines
- Ability to operate effectively in a fast-moving environment with evolving processes
Benefits:
- Health insurance
- Retirement plans
- Paid time off
- Flexible work hours
- Professional development opportunities


















