Governance, Risk and Compliance Analyst

Job Purpose

We are seeking a Governance, Risk and Compliance Analyst to work on a variety of challenges relating to scaling our ISO compliance programs. The ideal candidate will oversee and manage the Network Innovations Group's compliance with certification requirements across all operational and business processes. The role involves developing, implementing, and maintaining a comprehensive compliance program that ensures the company meets its legal, contractual, and regulatory obligations while supporting business objectives. This position serves as the compliance subject matter expert.

Duties and Responsibilities

• Facilitate the continuous development, implementation, and maintenance of the governance, risk, and compliance (GRC) program, including frameworks, policies and procedures, and regulatory requirements for ISO certification audits.
• Collaborate with internal stakeholders in North America, the United Kingdom, the European Union, and Asia-Pacific region to perform risk assessments, identify potential threats and vulnerabilities, and support the development and documentation of risk mitigation strategies, including the updating of risk treatment plan(s) to address any new risks or changes in the organization's environment
• Collaborate with cross-functional teams to support enacting new initiatives and projects, ensuring compliance considerations are adequately addressed.
• Coordinate and assist in the planning, preparation, and execution of internal and external audits, including the preparation of audit documentation and responses to audit findings.
• Stay up to date with security and privacy standards, help identify opportunities for improvement and enhance effectiveness and efficiency.
• Develop and deliver security awareness and training programs to educate employees on security policies, procedures, and best practices.
• Maintain accurate and up-to-date records and documents related to governance, risk, and compliance activities.
• Create and maintain data flow diagrams, network diagrams, and other illustrations as needed.
• Manage and maintain the risk register, prepare, and present reports on risk and compliance matters to key stakeholders.
• Participate in incident response and investigation activities as needed, including conducting root cause analyses, and recommending corrective actions.
• Contribute to and achieve business and departmental goals and objectives.

Qualifications

• Bachelor's degree in a related field along with advanced degree or professional certification preferred.
• 3+ years of experience in a similar role, preferably within a complex, corporate or project management environment
• A proven track record of successfully achieving and maintaining ISO certification, coordinating risk management functions, and delivering exceptional business outcomes.
• Excellent verbal & written communication and interpersonal skills, with the ability to effectively communicate security-related concepts to technical and non-technical audiences and engage and influence stakeholders at all levels.
• Strong analytical skills and the ability to identify, assess, and manage risks effectively.
• Skilled in technical documentation, including policy creation and data flow diagrams.
• Advanced level of proficiency in Microsoft Office Suite.
• Ability to work independently and prioritize tasks and projects to meet deadlines with minimal supervision.
• Relevant certifications such as CISSP, PCI DSS, CGRC, or CIA are desirable but not essential.
• Valid passport without restrictions.
• A willingness to embrace and live the core values of Network Innovations.

Working conditions

This position typically operates in a professional office environment. Standard office hours are 8am to 5pm, Monday through Friday, on a hybrid in-office/remote schedule. However, work outside of regular office hours and occasional global travel will be required. This role routinely uses standard office equipment and software. Must have valid passport. The ideal candidate will be based in either Calgary, Canada or Kuala Lumpur, Malaysia.

Physical requirements

Sitting and using a computer for extended periods of time and using typical office equipment.

Details

• Job title Governance, Risk and Compliance Analyst
• Department Legal
• Location Asia-Pac
• Supervisor Director of Legal Affairs and General Counsel