{"id":3522593,"url":"https://alion.io/job/quantexa-senior-grc-analyst","title":"Senior GRC Analyst","company":{"id":6359,"name":"Quantexa","domain":"quantexa.com","url":"https://alion.io/company/quantexa","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ottawa, Canada","Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":116000,"max":146000,"currency":"CAD","period":"year","gross":null,"usd_annual":104025},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-30T12:15:44Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-10-31T09:12:47Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"What we're all about.\nIt isn’t often you get to be part of a tech company that, since 2016, has been innovating the data analytics market in ways no-one else can. Our technology started out in FinTech, helping tackle serious criminal activity. Now, its potential is virtually limitless. Working at Quantexa isn't just intellectually stimulating. We’re a real team. Collaborating and constantly engineering better solutions. We’re ambitious, we think things through and we’re on a mission to discover just how far we can go. Nearly half of our colleagues come from an ethnic or religious minority background. We’re made up of people from 47 nationalities who speak over 20 languages. As a diverse mix of individuals, we make one big unstoppable team.\nWe're heading in one direction, the future. We’d love you to join us.\nLocation.\nQuantexa is looking for an experienced Senior GRC Analyst to support our growing business. This role will be based in Toronto/Ottawa and will require travel to customer sites and other Quantexa offices where appropriate. It can be structured a hybrid role depending on your location.\nThe opportunity.\nInformation Security Governance, Risk and Compliance is a key part of how Quantexa manages security across the organisation. Our approach focuses on effective security governance, proactive risk management, regulatory and contractual compliance, independent assurance and the continual improvement of our Information Security Management System.\nThis is a governance focused security role requiring a solid understanding of technical security, cloud environments and modern software development, combined with practical experience across security governance, risk management, compliance and customer assurance.\nAs part of the role, the successful candidate will serve as Quantexa’s Alternate Company Security Officer (ACSO), supporting our obligations and the current Company Security Officer (CSO) under applicable Canadian Government security requirements. When appointed this will include responsibilities relating to personnel and organisational security, contractual security requirements, and the protection of Government of Canada information and assets in line with the Contract Security Manual (CSM).\nThe role sits within Quantexa’s global Information Security function, headquartered in London, England, and will initially report to the Head of Information Security. As our Canadian focal point for security governance, the successful candidate will own Canadian Government and customer security requirements while applying Quantexa’s global policies, frameworks and assurance activities. The successful candidate will also engage with customers, government bodies, security authorities and external assessors, supporting the coordination of security and compliance requirements across our global operations.\nWhat you’ll be doing.\nGovernment Experience, Knowledge, and Skills\nSupporting the Company Security Officer (CSO) and perform responsibilities associated with Quantexa's Alternate Company Security Officer (ACSO) function.\n\nSupporting compliance with applicable government security requirements, including the Public Services and Procurement Canada (PSPC) Contract Security Program and Contract Security Manual.\n\nManaging and own the clearance requests, security briefings, security incidents and debriefings in line with the Contract Security Manual (CSM).\n\nReviewing commercial and government contracts, security clauses and procurement documentation to identify applicable requirements, and support their interpretation and implementation.\n\nInformation Security Governance, Risk and Compliance\nEnsuring regulatory, government, contractual and customer security requirements are identified, assessed and appropriately reflected in Quantexa's security controls and governance arrangements.\n\nMonitoring relevant regulatory and government security requirements, assessing their impact on Quantexa and recommending necessary changes.\n\nMaintaining, following and implementing Quantexa's global information security policies, standards and governance requirements within the business.\n\nSupporting continual improvements of Quantexa's security governance framework, incorporating findings from audits, incidents, risk assessments, and evolving regulatory and customer requirements.\n\nCustomer, Government and Supplier Assurance\nActing as a named security contact for relevant Government departments, customers and security authorities where required.\n\nSupporting customer and government security assurance activities, including due diligence, security assessments, questionnaires and evidence requests.\n\nSupporting third-party and supplier security risk assessments, ensuring identified risks are appropriately documented, escalated and managed.\n\nMaintaining and improving reusable security assurance materials and supporting evidence to promote consistency, reduce duplication and improve response efficiency across customer, partner and government assessments.\n\nAudit, Certification and Control Assurance\nSupporting internal and external audits, certification activities and ongoing compliance assessments, including ISO/IEC 27001, SOC 2, PCI-DSS, NIST SP 800-53r5, NIST SP 800-218, ISO/IEC 20243 and other applicable assurance frameworks.\n\nTracking audit findings, control deficiencies and remediation activities, ensuring appropriate ownership, timely resolution and reporting to relevant stakeholders.\n\nTechnical Security Governance\nWorking with internal and client technical and operational teams to assess control effectiveness, coordinate testing and obtain appropriate evidence of compliance.\n\nCross-Functional Partnership\nWorking with Legal and Commercial teams to review contractual information security requirements, assess associated risks and identify obligations requiring further action.\n\nWorking with the global information security function to provide clear reporting on security risks, compliance obligations, control effectiveness and remediation progress.\n\nWhat you’ll bring.\n8+ years in information security governance, risk, compliance or security assurance, across global frameworks and regulated government environments\n\nExperience with government security requirements personnel screening, organizational security, and contractual obligations\n\nA solid track record running security risk assessments, audits, control testing, and remediation\n\nA solid working knowledge of ISO/IEC 27001, SOC 2, NIST SP 800-53 (or equivalent) and enterprise/cloud security controls\n\nStrong communication skills, comfortable engaging senior stakeholders, auditors, and government representatives\n\nExperience operating within a global security function while owning Government specific requirements\n\nA strong technical communication ability with demonstrable experience of working in rapidly changing client environments.\n\nExperience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders.\n\nExperience partnering closely with Privacy and Legal teams on regulatory compliance initiatives.\n\nExperience managing control evidence, remediation programs, and continuous compliance activities.\n\nStrong project management and organizational skills with the ability to manage competing priorities.\n\nExcellent written and verbal communication skills, with the ability to translate complex compliance requirements into practical business guidance.\n\nNice to haves.\nProfessional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor.\n\nPrior experience in a high-growth and fat-paced FinTech/SaaS/enterprise software environments.\n\nKnowledge of privacy regulations (PIPEDA, GDPR) alongside security frameworks.\nSecurity Clearance.\nThis position requires an active Government of Canada Secret (Level II) security clearance, or the ability to obtain and maintain this clearance through the Government of Canada Contract Security Program (CSP). Obtaining and maintaining the required security clearance is necessary to perform applicable Government of Canada contract work. Security screening processing times are determined by the Government. Quantexa does not control the outcome or timeline and further information on the requirements and process can be found via the following link: Government of Canada - Security Clearance Overview\nSuccessful completion of the required security screening is a condition of employment.\nOur perks and quirks.\nWhat makes you Q will help you to realize your full potential, flourish and enjoy what you do, while being recognized and rewarded with our broad range of benefits.\nWe offer:\nCompetitive salary + bonus\n100% RRSP match up to 5%\nCompetitive annual leave, plus your birthday off, parental leave, PTO, and observed holidays\nComprehensive benefits coverage, including mental health support, fitness reimbursements, and financial well-being\nTax-advantageous benefits, such as commuter benefits, healthcare, and dependent care\nRegularly bench-marked salary rates\nWell-being days\nVolunteer Day off\nWork from Home Equipment\nFree Subscription to a meditation, relaxation and sleep app\nContinuous Training and Development\nSpend up to 2 months working outside of your country of employment over a rolling 12-month period with our ‘Work from Anywhere’ policy\nTeam Social Budget & Company-wide Socials\nOur mission.\nWe have one mission. To help businesses grow. To make data easier. And to make the world a better place. We’re not a start-up. Not anymore. But we’ve not been around that long either. What we are is a collection of bright, passionate minds harnessing complexities and helping our clients and their communities. One culture, made of many. Heading in one direction - the future.\nIt’s all about you.\nWe want you to feel welcome, valued, and respected - because it’s your individuality and passion that make you Q. We see that, and we celebrate it. That’s why we’re proud to be an Equal Opportunity Employer.\nWe are committed to fostering an inclusive and diverse work environment, continuously improving to ensure everyone belongs. Our recruitment process is designed to be inclusive and accessible. If you need any reasonable adjustments or accommodations, please let our Talent Acquisition Team know - we’re happy to assist.\nNo matter your race, beliefs, color, national origin, gender, sexual orientation, age, marital status, neurodiversity, or abilities-whoever you are-if you're a passionate, curious, and caring human eager to push the boundaries of what’s possible, we want to hear from you.","description_format":"text","description_chars":10568,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Annual leave","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fraud Detection","Master Data Management","Decision Intelligence","Financial AI"],"lifecycle":[{"event":"open","at":"2026-10-30T12:47:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":48,"reasons":["conf:0","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":104025,"is_top_pay":false},"html_url":"https://alion.io/job/quantexa-senior-grc-analyst","json_url":"https://alion.io/job/quantexa-senior-grc-analyst.json","meta":{"generated_at":"2026-10-31T11:21:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17411,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6359},"rest":"https://alion.io/mcp/rest/get_company?id=6359"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquantexa-senior-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquantexa-senior-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquantexa-senior-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/quantexa-senior-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquantexa-senior-grc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3522593}},{"tool":"search_jobs","arguments":{"company":"quantexa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3522593},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}