Senior Governance, Risk and Compliance (GRC) Analyst - Remote

Overview

KOHO is on a mission to improve financial services for Canadians, focusing on transparency and user empowerment. The company values work-life integration and offers a remote-first setup.

In Short

• Join KOHO as a Senior GRC Analyst in a remote role based in Canada.
• Establish risk and compliance programs with an emphasis on automation.
• Manage third-party cybersecurity risks and vulnerability management.
• Collaborate with engineers to address vulnerabilities.
• Create and communicate information security policies.
• Advise on risk management strategies.
• Support security awareness initiatives across the organization.
• Engage with tech compliance requirements related to various standards.

Requirements

• Bachelor’s degree in a relevant field.
• Self-starter with ownership of the risk and compliance roadmap.
• Excellent communication skills to convey risk posture.
• Experience with PCI DSS, SOC2 Type II, and NIST standards.
• Hands-on experience with AWS Security tools.
• Experience leading audits and working with regulators.
• Ability to automate data retrieval for compliance.
• Strong cross-functional collaboration skills.
• Preferred: Familiarity with OSFI guidelines and CISSP.

Benefits

• Opportunity to shape the future of fintech.
• Competitive compensation and equity.
• Engaged team with high collaboration.
• Generous vacation and wellness days.
• Remote-first environment with coworking support.
• Access to coaching and growth programs.
• Parental top-up and leave policies.
• Comprehensive health benefits.
• Budgets for professional development and home office setup.