Senior IT Security, Risk & Compliance (GRC) Analyst

About the Position

Join a dynamic organization at the forefront of Alberta's gaming, liquor, and cannabis sectors. As a Senior IT Security, Risk & Compliance Analyst, you will step into a high-impact Governance, Risk, and Compliance (GRC) role that carries real authority, moving far beyond standard technical operations to shape the organization's security posture.

Main Missions

• Lead and manage the comprehensive IT and Cybersecurity Risk Management program.
• Drive the full risk management lifecycle: collection, assessment, scoring, treatment tracking, and governance review.
• Act as the primary point of contact for Internal Audit and the Auditor General.
• Contribute to PCI DSS audits and ensure continuous compliance with regulatory obligations.
• Align IT risk management with the Enterprise Risk Management (ERM) framework.
• Translate complex technical risks into actionable insights for executive leadership.

Profile Required

• Proven experience in a senior GRC or IT Risk management role.
• Ability to operate at the intersection of IT, security operations, audit, and executive governance.
• Strong analytical mindset with the ability to present risks in a business-centric manner.
• Experience navigating complex regulatory environments and high-stakes audits.

Required Skills

• IT Governance, Risk & Compliance (GRC)
• Cybersecurity Risk Assessment & Management
• PCI DSS Compliance
• Audit Coordination (Internal & External)
• Enterprise Risk Management (ERM) alignment
• Stakeholder Management & Executive Reporting