1 day ago

Senior Security Analyst - GRC

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Build and improve the Information Security program by leading GRC activities across global and regional frameworks. Support prospect and customer security questions, maintain security policies, and help drive security audits, assessments, and compliance certifications. Evaluate technical controls across network and application layers, translate requirements into actionable guidance, manage security risk processes, and coordinate key availability and incident-response exercises.

Location: Montreal

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead and support compliance initiatives across frameworks including SOC 1/SOC 2, ISO 27001, IRAP, PCI-DSS, SecNumCloud, Cyber Essentials Plus (CE+), BSI C5, and NIST 800-53.
•Evaluate technical controls across the technology stack (TCP/IP layers) and translate security requirements into actionable guidance for engineering and infrastructure teams.
•Drive customer security audits, security questionnaires, and contract reviews (with a primary focus on EMEA) including negotiation/review of French contracts.
•Lead or support security risk management processes, including risk identification, analysis, scoring, treatment planning, and ongoing monitoring.
•Support continuous compliance monitoring with manual and automation/GRC tooling; coordinate security availability controls and exercises (BIA, Disaster Recovery testing, access reviews, incident response exercises).

Pay and Benefits

Perks:SnacksMeal Allowance

Key Requirements

•At least 4 years of experience as a Security Analyst in GRC.
•Strong knowledge of security, risk, and compliance frameworks (e.g., NIST CSF/800-53, ISO 27001, SOC, PCI-DSS, GDPR).
•Direct experience managing audits, self-assessments, or risk assessments against InfoSec frameworks.
•Experience supporting security risk management (risk assessments, risk registers, business impact analysis).
•Working knowledge of cloud security and security architecture discussions with engineering/infrastructure teams (Azure, AWS, GCP).

Experience:4+ years

Skills:CommunicationOrganizational skillsAttention to detailInitiativeIndependent work

Certifications:CISSPCISACISMAzure Cloud Security

Languages:FrenchEnglish

Tech Stack:SOC 1SOC 2ISO 27001IRAPPCI-DSSSecNumCloudCyber Essentials Plus (CE+)BSI C5NIST 800-53NIST 800-39TCP/IPNetwork segmentationFirewall rulesetsTLS/SSLIDS/IPSEncryption in transitEncryption at restCloud security configurationsOWASPMITRE ATT&CK

Company Brief

Ivalua

Provides a cloud-based procure-to-pay and sourcing platform that helps organizations manage procurement, supplier relationships, sourcing events, and spend analytics to drive cost savings, compliance, and supplier collaboration across global enterprises.

Industry: Procurement Platforms

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Paris, France

Founded: 2000

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Ivalua

1 day ago

Senior Security Analyst - GRC

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: Montreal

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead and support compliance initiatives across frameworks including SOC 1/SOC 2, ISO 27001, IRAP, PCI-DSS, SecNumCloud, Cyber Essentials Plus (CE+), BSI C5, and NIST 800-53.
•Evaluate technical controls across the technology stack (TCP/IP layers) and translate security requirements into actionable guidance for engineering and infrastructure teams.
•Drive customer security audits, security questionnaires, and contract reviews (with a primary focus on EMEA) including negotiation/review of French contracts.
•Lead or support security risk management processes, including risk identification, analysis, scoring, treatment planning, and ongoing monitoring.
•Support continuous compliance monitoring with manual and automation/GRC tooling; coordinate security availability controls and exercises (BIA, Disaster Recovery testing, access reviews, incident response exercises).

Pay and Benefits

Perks:SnacksMeal Allowance

Key Requirements

•At least 4 years of experience as a Security Analyst in GRC.
•Strong knowledge of security, risk, and compliance frameworks (e.g., NIST CSF/800-53, ISO 27001, SOC, PCI-DSS, GDPR).
•Direct experience managing audits, self-assessments, or risk assessments against InfoSec frameworks.
•Experience supporting security risk management (risk assessments, risk registers, business impact analysis).
•Working knowledge of cloud security and security architecture discussions with engineering/infrastructure teams (Azure, AWS, GCP).

Experience:4+ years

Skills:CommunicationOrganizational skillsAttention to detailInitiativeIndependent work

Certifications:CISSPCISACISMAzure Cloud Security

Languages:FrenchEnglish

Company Brief

Ivalua

Industry: Procurement Platforms

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Paris, France

Founded: 2000

Website LinkedIn