Senior Information Security Risk Specialist (GRC)

Support the planning and performance of IT risk-based security audits and projects, including risk assessments and communication to stakeholders. Collaborate with process and control owners throughout the audit lifecycle for documentation updates and remediation of identified deficiencies. Participate in internal security and compliance programs, track recurring controls, and assist in customer security reviews and external inquiries.

5+ years of experience in information security, risk, or compliance. Strong risk management experience and ability to perform internal audits with minimal supervision. An advanced degree in computer science or related field is preferred, along with relevant certifications such as ISO 27001, CISA, or CISSP.

Comprehensive benefits including equity and rewards, competitive leave benefits, private medical insurance, and a hybrid work model with flexible hours.