🛠 Tech Stack

💼 About This Role

You'll support and grow Benevity's security governance, risk, privacy, and regulatory program. You'll contribute to compliance activities, risk assessments, and third-party risk management while building skills across governance, risk, audit, and privacy domains.

🎯 What You'll Do

• Assist in maintaining security and privacy policies aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR.
• Support enterprise risk assessments, vendor reviews, and maintenance of the risk register.
• Assist with audit readiness and evidence gathering for compliance frameworks.
• Respond to client security questionnaires, RFPs, and third-party risk requests.

📋 Requirements

• 2–4 years of experience in cybersecurity or GRC (0–2 years for junior candidates).
• Working knowledge of ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, or CCPA/CPRA.
• Exposure to GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata).
• Familiarity with risk assessment methodologies and compliance evidence gathering.

✨ Nice to Have

• Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
• Interest in leveraging automation and AI to streamline GRC processes.
• Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP.

🎁 Benefits & Perks

• 🌍 Flexible hybrid work.
• 📈 Growth opportunities and career development.
• 🤝 Caring co-workers and supportive culture.
• 💡 Innovative work with purpose-driven tech.

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 45 min
3. 3Hiring Manager Interview· 45 min