Information Security Analyst - GRC

As an Information Security Analyst - GRC at G-P, your primary responsibilities will include implementing and maintaining our governance, risk, and compliance programme. You will engage in security assessments, support due diligence requests from clients, and lead security awareness training across the organization. Additionally, you’ll participate in compliance audits such as ISO 27001 and SOC 2 while managing the access review process and collaborating with the Enterprise Risk Management team.

To be considered for the Information Security Analyst - GRC position at G-P, you should possess a bachelor’s degree in Computer Science or a related field, complemented by over 5 years of experience in information security roles. Familiarity with GRC frameworks like ISO 27001 and SOC 2 is crucial, along with strong communication skills and a proven ability to work in a collaborative environment. Prior experience with internal and external auditors is beneficial.

G-P is committed to empowering its employees, including Information Security Analysts, through various growth opportunities. You’ll engage in cross-training with other members of the Information Security team and have access to resources designed for continued education. Our flexible environment encourages innovation and skill expansion, ensuring you can stay ahead in the rapidly evolving field of cybersecurity.

Working as an Information Security Analyst - GRC at G-P comes with a competitive salary range between $87,000 to $109,000 CAD, complemented by a robust benefits package. This includes generous paid parental leave, flexible time off, medical, dental, and vision insurance, along with a sabbatical after five years of service. Plus, your role also qualifies for an annual bonus based on both individual and company performance.

In your role as an Information Security Analyst - GRC at G-P, you will play an essential part in organizing and participating in compliance audits, such as SOC 2 and ISO 27001. You will help prepare the necessary documentation, support the auditing teams with requested information, and ensure that ongoing compliance with GRC frameworks is maintained throughout the company.

When answering this question, highlight specific projects or roles where you've implemented or managed compliance with these frameworks. Discuss your understanding of their requirements and how you contributed to audits or compliance initiatives in past positions.

Demonstrate your commitment to professional development by mentioning specific resources you utilize—such as security blogs, courses, webinars, or conferences. Explain how you apply this knowledge to improve security measures in your previous roles.

Discuss various strategies like regular training sessions, creating engaging materials, and incorporating gamification techniques. Emphasize the importance of open communication and making security a shared responsibility among all team members.

Provide a specific example that showcases your problem-solving skills and diplomacy. Focus on what the issue was, the steps you took to resolve it, and the positive outcome that resulted from your efforts.

Outline your methodology for prioritizing tasks, such as assessing the potential impact and urgency of each assessment. Discuss any project management tools you use that help you stay organized and meet deadlines.

Choose an example where you identified a inefficiency and describe the changes you implemented. Explain the results, such as reduced risk or improved compliance, highlighting your initiative and impact on the organization.

Discuss how effective communication is critical in enforcing security protocols, raising awareness, and ensuring all team members understand the importance of compliance. Bring examples of how you've successfully communicated security needs within your previous teams.

Explain your approach to assessing security posture, including conducting audits, reviewing policies, and evaluating technical controls. Mention key metrics you consider and how you provide recommendations for improvement.

Reflect on a scenario where you had to balance the needs of various stakeholders while ensuring compliance. Highlight your communication skills and ability to negotiate solutions that satisfy both security and business requirements.

Share your enthusiasm for G-P’s mission and values, emphasizing how they align with your career goals. Mention specific aspects of the company’s culture and the opportunity to make a global impact that excite you.