Senior Governance Risk and Compliance (GRC) Analyst
About The Position
IREN is a vertically integrated AI Cloud provider, delivering large-scale data centers and GPU clusters for AI training and inference. IREN’s platform is underpinned by its expansive portfolio of grid-connected land and power in renewable-rich regions across North America, Europe and APAC. With 100% renewable energy, we build, own and operate our data centers and take pride in being at the forefront of sustainable solutions for the ever-evolving applications of high-performance compute. We believe that human progress is invaluable, but it should be done in the right way – responsibly, sustainably and having a positive impact on the communities we operate in.
Requirements
- Bachelor’s (or Master’s) degree in Information Security, Risk, Business or equivalent.
- 5-7 years of experience in cybersecurity, IT program management, or a related field.
- Proven track record leading at least one successful FedRAMP authorization.
- Deep knowledge of the FedRAMP framework, NIST 800-53 controls, and supporting documentation.
- Audit/assessment experience using risk-based frameworks.
- Familiarity with cloud security architecture and adjacent frameworks (SOC 2, ISO 27001, HITRUST, etc.)
- Strong communication and relationship-building skills across technical and executive levels.
- Demonstrated analytical and problem-solving skills, highly organized and detail oriented.
Nice To Haves
- Experience engaging with government agencies or federal sector stakeholders is highly desirable.
- Relevant certifications (CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementor) strongly preferred.
Responsibilities
- Lead enterprise-wide risk assessment programs, identify strategic risks, recommend mitigation and monitor residual risk.
- Develop and maintain governance frameworks that align business objectives with regulatory/compliance requirements and security best practices.
- Execute the company's FedRAMP authorization program from strategy through implementation.
- Manage relationships with 3PAOs, consultants, and other external partners to facilitate assessments and drive progress.
- Lead the preparation and submission of all FedRAMP deliverables, including the System Security Plan (SSP), policies, procedures, and supporting security documents.
- Develop and maintain security and privacy policies, standards, and control frameworks aligned with ISO 27001, SOC 2, HITRUST, FedRAMP, and other global regulations
- Support policy approvals, exception handling, and attestation processes while identifying opportunities for automation and process improvements.
- Lead and execute enterprise risk assessments, including vendor and process-level reviews.
- Support IREN's Third-Party Risk Management program including vendor assessments, monitoring, and remediation tracking
- Lead readiness and response efforts for ISO 27001, HITRUST, FedRAMP and other audits and certifications.
- Keep abreast of emerging regulatory, technological and business-risks, and drive improvements to the GRC program accordingly.
Benefits
- Medical, dental, and vision insurance coverage – 100% company paid for employees and dependents
- Company-paid life and disability insurance
- Voluntary life and critical illness coverage available
- Employee Assistance Program and virtual health care platform
- RRSP with company match
- Voluntary TFSA
- 3 weeks annually for vacation and paid holidays
- Flexible Work Arrangements
- Opportunities for advancement and internal mobility
- Training and personal development opportunities
- Company events and team-building activities
- Relocation assistance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
