IT GRC Analysts Contractor

Powerfleet•Toronto, ON

1d•CA$16,600

About The Position

Powerfleet is seeking an experienced IT GRC Contractor to provide hands-on execution support across SOX close-out activities, external audits, GRC platform administration, security awareness training, privacy operations, and emerging AI governance programs. This role is execution-focused and delivery-driven, supporting critical compliance milestones including SOX, SOC 2, ISO 27001, ISO 27701, ISO 42001 (AI Management), and EU AI regulatory readiness. The contractor will work closely with internal teams and external auditors to ensure audit-ready documentation, timely evidence delivery, and successful program progression.

Requirements

3–5 years of experience in GRC, IT risk, compliance, or audit operations
Hands-on experience supporting SOX and SOC 2 audits
Working knowledge of ISO 27001 (program build-out or readiness preferred)
Experience supporting data privacy frameworks and programs (ISO 27701 preferred)
Exposure to AI governance or emerging AI regulatory requirements (ISO 42001 or EU AI familiarity a plus)
Experience with GRC platforms (Hyperproof strongly preferred)
Familiarity with security awareness platforms (KnowBe4 preferred)
Strong documentation, organizational, and stakeholder communication skills
Prior contractor or consulting experience in GRC or audit environments
Ability to operate independently with minimal onboarding
Experience supporting multiple concurrent compliance initiatives
Strong written communication skills for auditor and regulator interaction

Nice To Haves

ISO 27001 program build-out or readiness
ISO 27701
ISO 42001 or EU AI familiarity
Hyperproof
KnowBe4

Responsibilities

Support SOX year-end and quarter-end close-out activities, including evidence finalization and quality review, control testing close-out coordination, and deficiency and remediation tracking.
Respond to auditor follow-up requests and inquiries, ensuring SOX documentation and evidence are complete, accurate, and audit-ready.
Support SOC 2 audit execution, including evidence coordination and submission, control documentation maintenance, and tracking and responding to auditor requests.
Assist with remediation documentation and management responses for SOC 2 audits, as needed.
Assist with ISO 27001 ISMS program development and enhancement, including supporting policy, procedure, and control documentation, aligning controls and evidence to ISO requirements, and preparing materials for readiness or certification activities.
Support internal stakeholders operationalizing ISO 27001 requirements.
Support ISO 27701 (Privacy Information Management System) build-out, including documentation of privacy controls, roles, and responsibilities, mapping privacy requirements to existing ISO 27001 controls, and supporting evidence collection and audit readiness.
Assist with broader data privacy compliance efforts, including maintaining privacy documentation and evidence, and supporting privacy risk assessments and compliance tracking.
Support EU AI regulatory readiness and AI governance initiatives, including assisting with AI use case inventory and documentation, supporting AI risk assessments and governance workflows, and aligning organizational practices to ISO 42001 (AI Management System) requirements.
Assist with development of AI policies, procedures, and compliance artifacts.
Provide hands-on administration of Hyperproof, including managing evidence requests and workflows, maintaining control, framework, and evidence mappings, and supporting auditor portals and compliance dashboards.
Ensure data quality and consistency across programs and frameworks within Hyperproof.
Support management of the KnowBe4 security awareness training program, including campaign execution and tracking, completion monitoring and reporting, and supporting audit and compliance evidence needs.
Monitor and manage the privacy inbox, including assisting in intake, triage, and tracking of privacy-related requests.
Oversee coordination with Legal, Security, and IT stakeholders for privacy-related requests.
Ensuring timely and documented responses for privacy-related requests.