ZipRecruiter

Log In

1

Grc Risk Analyst Jobs in Ontario (NOW HIRING)

Sysco

The GRC analyst will be responsible for leading the day-to-day cyber compliance, data governance, and cyber risk management functions. * The role will include responsibility for defining, creating ...

TMX Group

Operational Risk Analyst

Toronto, ON · Hybrid

CA$60K - CA$80K/yr

Reporting to the Head of Risk, TSX Trust, the Operational Risk Analyst is a critical second-line ... Proficiency in GRC tools (preferably Resolver ) and data visualization tools (e.g., Tableau or ...

KPMG

Manager, GRC

Toronto, ON · On-site

Define enterprise GRC target architecture and solution blueprints (data models, taxonomy, control ... Knowledge of FAIR risk quantification, BI/analytics (Power BI/Tableau), continuous control ...

KPMG

Senior Manager GRC

Toronto, ON · On-site

... Risk Analytics. * Perform hands-on configuration/customization across enterprise GRC technologies ... including custom objects, forms, workflows, reporting. Technical Implementation and Integration

CorGTA

Senior SAP GRC Security Consultant

Toronto, ON

CA$78/hr

Senior SAP GRC Security Consultant (SAP S/4HANA, SAP Security, Identity Access Governance) Location ... Access Risk Analysis (ARA) * Emergency Access Management (EAM) * Business Role Management (BRM ...

PwC

IRM/GRC Technologies Senior Associate

Toronto, ON · On-site

CA$65K - CA$109K/yr

Those in governance, risk, controls and compliance at PwC will be responsible for confirming ... Use a broad range of analytics tools, technology, digital solutions, and techniques to extract ...

Forhyre

Specialize in ServiceNow Governance, Risk, and Compliance (GRC) or ServiceNow SecOps product suite ... Excellent verbal/written communication, problem solving, analytical, and independent judgment ...

Resolver

Content Strategist

Toronto, ON · On-site +1

... product, analysts, and Kroll to source insight and ensure technical accuracy. * Turn complex GRC and S&I topics into clear, compelling narratives that resonate with the people who own risk ...

Deloitte

Consultant, GRC Technology

Toronto, ON · On-site

CA$68K - CA$102K/yr

As a Consultant in our Risk Tech and Data Team, you will support and advise on a range of projects ... If you love tech, data analytics, strategy, and solving real-world business problems, this is the ...

next page

Showing results 1-20

All JobsGrc Risk Analyst JobsGrc Risk Analyst Jobs in Ontario

Grc Risk Analyst information

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What is a GRC Risk Analyst?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.
What are popular job titles related to Grc Risk Analyst jobs in Ontario? For Grc Risk Analyst jobs in Ontario, the most frequently searched job titles are:
What job categories do people searching Grc Risk Analyst jobs in Ontario look for? The top searched job categories for Grc Risk Analyst jobs in Ontario are:
What cities in Ontario are hiring for Grc Risk Analyst jobs? Cities in Ontario with the most Grc Risk Analyst job openings:
Grc Risk Analyst jobs near you
Infographic showing various Grc Risk Analyst job openings in Ontario as of August 2026, with employment types broken down into 1% As Needed, 79% Full Time, 18% Part Time, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution.

Senior Cyber Security Risk Analyst

Alquemy

Toronto, ON

Full-time

Re-posted 7 days ago

Job description

Job Description We are seeking a Senior Cyber Security Risk Analyst to join our Toronto client's team. In this pivotal role, you will lead the creation of comprehensive cyber system risk reports, translating complex technical findings from penetration tests and Threat and Risk Assessments (TRAs) into actionable business insights for senior stakeholders. As a senior member of the team, you will champion industry-standard frameworks and leverage ServiceNow GRC to maintain, mature, and safeguard the organization's overall cyber risk posture.

Key Responsibilities Lead Risk Reporting: Oversee and manage the cyber risk reporting queue, ensuring the delivery of high-quality, executive-ready risk assessments. Apply Standard Methodologies: Utilize NIST and HTRA methodologies to rigorously assess, quantify, and communicate technical risks. Drive GRC Excellence: Document, track, and manage the lifecycle of risks, treatment plans, and remediation efforts within ServiceNow GRC.

Translate Tech to Business: Bridge the gap between engineering and the boardroom by converting complex technical vulnerabilities into clear, high-impact business risk statements for non-technical leadership. Support Governance & Audits: Act as a trusted advisor during governance forums and internal audits, providing articulate verbal and written risk communications. Innovate Securely: Leverage AI-assisted tools to streamline content generation and report optimization, while strictly maintaining data confidentiality and privacy boundaries.

Education & Experience Education: University Degree or College Diploma in Computer Science, Information Security, Risk Management, or a related field. Experience: 5+ years of progressive experience in cyber security, IT audit, or technology risk management. Executive Reporting: 3+ years of dedicated experience crafting executive-grade risk reports and presentations for C-suite or steering committees.

Technical & Core Competencies Framework Expertise: Deep practical experience applying NIST frameworks (e.g., CSF, 800-53) and HTRA methodologies. Tooling: Hands-on, administrative, or advanced user experience with ServiceNow GRC (Integrated Risk Management). Vulnerability Acumen: A strong understanding of common technical vulnerabilities (OWASP Top 10, CVEs) and the unique ability to map them to operational and financial business impacts

Communication: Exceptional communication and storytelling skills, with the ability to influence stakeholders and defend risk ratings with data-driven logic. Relevant professional certifications (e.g., CRISC, CISM, CISSP, or CISA). Experience integrating AI workflows into daily risk analysis safely.

Apply