GRC Analyst II

Payscale

3d•CA$62,860 - CA$94,290•Remote

About The Position

Payscale is looking for a GRC Analyst II to join our Information Security Team, reporting to the Manager of GRC. In this role, you will take on broader ownership of core GRC program areas while supporting senior-level initiatives across risk, audit, and compliance. The ideal candidate brings hands-on GRC experience, strong communication skills, and the ability to operate independently across technical and business stakeholders to drive compliance and risk outcomes.

Requirements

Bachelor's degree in cybersecurity, information systems, or a related field
2-4 years of work experience in GRC, information security, or a related field within a commercial SaaS or software company
Working knowledge of information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS
Demonstrated experience with data classification frameworks and data governance concepts
Experience conducting vendor security assessments and managing third-party risk workflows
Hands-on experience with audit support activities, including evidence collection for SOC 2 or similar frameworks
Solid understanding of information security policies, standards, and procedures
Hands-on experience with GRC tools or platforms (e.g., Drata, ServiceNow GRC, or similar)
Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders
Ability to manage multiple workstreams independently, prioritize effectively, and meet deadlines

Responsibilities

Maintain Payscale's data classification program, including classification schema, tagging standards, and coordination with data owners to ensure accurate and consistent classification across systems and assets
Maintain the system classification and ownership inventory, partnering with teams to ensure systems are properly classified, attributed, and reviewed on a defined cadence
Support audit coordination activities for SOC 2 and other compliance frameworks.
Conduct vendor security assessments reviews.
Manage the policy management lifecycle, including drafting new policies and standards, tracking review cycles, coordinating approvals, and maintaining version control.
Identify control gaps or process improvement opportunities and partner with business units to implement and sustain effective controls.

Benefits

Monthly company All Hands meetings
Regular opportunities for executive leadership exposure through things like AMAs
Access to continued learning & development opportunities
A growing network of Employee Resource Groups
Company sponsored volunteer hours
Holiday – Annual accrual for full time and part time employees
Sick Pay – Annual paid time off available
Company Paid and Statutory Holidays – Generous time off provided
16 weeks of paid parental leave (top off) for birthing and non-birthing parents
Life Insurance - Basic life and AD&D benefit
Long term disability & Critical Illness – Coverage for certain types of illnesses and surgeries
Medical/Rx, Dental, Telehealth – Coverage for prescription, paramedical, medical supplies, emergency, basic and accidental dental, and virtual health care services
Health/Wellness Spending Account – Annual amount provided to you and your family for approved expenses
RRSP offered to employees with a 1:1 match up to 4%
BenefitHub – Discount marketplace, full access to all your benefits and provider portals
Annual remote work stipend to be used on wellness or home office equipment