Senior GRC Analyst

The opportunity.

Information Security Governance, Risk and Compliance is a key part of how Quantexa manages security across the organisation. Our approach focuses on effective security governance, proactive risk management, regulatory and contractual compliance, independent assurance and the continual improvement of our Information Security Management System.

This is a governance focused security role requiring a solid understanding of technical security, cloud environments and modern software development, combined with practical experience across security governance, risk management, compliance and customer assurance.

As part of the role, the successful candidate will serve as Quantexa’s Alternate Company Security Officer (ACSO), supporting our obligations and the current Company Security Officer (CSO) under applicable Canadian Government security requirements. When appointed this will include responsibilities relating to personnel and organisational security, contractual security requirements, and the protection of Government of Canada information and assets in line with the Contract Security Manual (CSM).

The role sits within Quantexa’s global Information Security function, headquartered in London, England, and will initially report to the Head of Information Security. As our Canadian focal point for security governance, the successful candidate will own Canadian Government and customer security requirements while applying Quantexa’s global policies, frameworks and assurance activities. The successful candidate will also engage with customers, government bodies, security authorities and external assessors, supporting the coordination of security and compliance requirements across our global operations.

Government Experience, Knowledge, and Skills

• Supporting the Company Security Officer (CSO) and perform responsibilities associated with Quantexa's Alternate Company Security Officer (ACSO) function.

• Supporting compliance with applicable government security requirements, including the Public Services and Procurement Canada (PSPC) Contract Security Program and Contract Security Manual.

• Managing and own the clearance requests, security briefings, security incidents and debriefings in line with the Contract Security Manual (CSM).

• Reviewing commercial and government contracts, security clauses and procurement documentation to identify applicable requirements, and support their interpretation and implementation.

What you’ll bring.

• 8+ years in information security governance, risk, compliance or security assurance, across global frameworks and regulated government environments

• Experience with government security requirements personnel screening, organizational security, and contractual obligations

• A solid track record running security risk assessments, audits, control testing, and remediation

• A solid working knowledge of ISO/IEC 27001, SOC 2, NIST SP 800-53 (or equivalent) and enterprise/cloud security controls

• Strong communication skills, comfortable engaging senior stakeholders, auditors, and government representatives

• Experience operating within a global security function while owning Government specific requirements

• A strong technical communication ​ability​ with demonstrable experience of working in rapidly changing client environments.

• Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders.

• Experience partnering closely with Privacy and Legal teams on regulatory compliance initiatives.

• Experience managing control evidence, remediation programs, and continuous compliance activities.

• Strong project management and organizational skills with the ability to manage competing priorities.

• Excellent written and verbal communication skills, with the ability to translate complex compliance requirements into practical business guidance.

Nice to haves.

• Professional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor.

• Prior experience in a high-growth and fat-paced FinTech/SaaS/enterprise software environments.

Knowledge of privacy regulations (PIPEDA, GDPR) alongside security frameworks​.

It’s all about you.

We want you to feel welcome, valued, and respected - because it’s your individuality and passion that make you Q. We see that, and we celebrate it. That’s why we’re proud to be an Equal Opportunity Employer.

We are committed to fostering an inclusive and diverse work environment, continuously improving to ensure everyone belongs. Our recruitment process is designed to be inclusive and accessible. If you need any reasonable adjustments or accommodations, please let our Talent Acquisition Team know - we’re happy to assist.

No matter your race, beliefs, color, national origin, gender, sexual orientation, age, marital status, neurodiversity, or abilities—whoever you are—if you're a passionate, curious, and caring human eager to push the boundaries of what’s possible, we want to hear from you.

Our perks and quirks.

What makes you Q will help you to realize your full potential, flourish and enjoy what you do, while being recognized and rewarded with our broad range of benefits.

We offer

Competitive salary + bonus

100% RRSP match up to 5%

Competitive annual leave, plus your birthday off, parental leave, PTO, and observed holidays

Comprehensive benefits coverage, including mental health support, fitness reimbursements, and financial well-being

Tax-advantageous benefits, such as commuter benefits, healthcare, and dependent care

Regularly bench-marked salary rates

Well-being days

Volunteer Day off

Work from Home Equipment

Free Subscription to a meditation, relaxation and sleep app

Continuous Training and Development

Spend up to 2 months working outside of your country of employment over a rolling 12-month period with our ‘Work from Anywhere’ policy

Team Social Budget & Company-wide Socials