Senior GRC Analyst

Job description

What we're all about. It isn’t often you get to be part of a tech company that, since 2016, has been innovating the data analytics market in ways no-one else can. Our technology started out in FinTech, helping tackle serious criminal activity. Now, its potential is virtually limitless. Working at Quantexa isn't just intellectually stimulating. We’re a real team. Collaborating and constantly engineering better solutions. We’re ambitious, we think things through and we’re on a mission to discover just how far we can go. Nearly half of our colleagues come from an ethnic or religious minority background. We’re made up of people from 47 nationalities who speak over 20 languages. As a diverse mix of individuals, we make one big unstoppable team. We're heading in one direction, the future. We’d love you to join us. Location. Quantexa is looking for an experienced Senior GRC Analyst to support our growing business. This role will be based in Toronto/Ottawa and will require travel to customer sites and other Quantexa offices where appropriate. It can be structured a hybrid role depending on your location. The opportunity. Information Security Governance, Risk and Compliance is a key part of how Quantexa manages security across the organisation. Our approach focuses on effective security governance, proactive risk management, regulatory and contractual compliance, independent assurance and the continual improvement of our Information Security Management System. This is a governance focused security role requiring a solid understanding of technical security, cloud environments and modern software development, combined with practical experience across security governance, risk management, compliance and customer assurance. As part of the role, the successful candidate will serve as Quantexa’s Alternate Company Security Officer (ACSO), supporting our obligations and the current Company Security Officer (CSO) under applicable Canadian Government security requirements. When appointed this will include responsibilities relating to personnel and organisational security, contractual security requirements, and the protection of Government of Canada information and assets in line with the Contract Security Manual (CSM). The role sits within Quantexa’s global Information Security function, headquartered in London, England, and will initially report to the Head of Information Security. As our Canadian focal point for security governance, the successful candidate will own Canadian Government and customer security requirements while applying Quantexa’s global policies, frameworks and assurance activities. The successful candidate will also engage with customers, government bodies, security authorities and external assessors, supporting the coordination of security and compliance requirements across our global operations. What you’ll be doing. Government Experience, Knowledge, and Skills - Supporting the Company Security Officer (CSO) and perform responsibilities associated with Quantexa's Alternate Company Security Officer (ACSO) function. - Supporting compliance with applicable government security requirements, including the Public Services and Procurement Canada (PSPC) Contract Security Program and Contract Security Manual. - Managing and own the clearance requests, security briefings, security incidents and debriefings in line with the Contract Security Manual (CSM). - Reviewing commercial and government contracts, security clauses and procurement documentation to identify applicable requirements, and support their interpretation and implementation. Information Security Governance, Risk and Compliance - Ensuring regulatory, government, contractual and customer security requirements are identified, assessed and appropriately reflected in Quantexa's security controls and governance arrangements. - Monitoring relevant regulatory and government security requirements, assessing their impact on Quantexa and recommending necessary changes. - Maintaining, following and implementing Quantexa's global information security policies, standards and governance requirements within the business. - Supporting continual improvements of Quantexa's security governance framework, incorporating findings from audits, incidents, risk assessments, and evolving regulatory and customer requirements. Customer, Government and Supplier Assurance - Acting as a named security contact for relevant Government departments, customers and security authorities where required. - Supporting customer and government security assurance activities, including due diligence, security assessments, questionnaires and evidence requests. - Supporting third-party and supplier security risk assessments, ensuring identified risks are appropriately documented, escalated and managed. - Maintaining and improving reusable security assurance materials and supporting evidence to promote consistency, reduce duplication and improve respo