Mattermost is hiring a
GRC Analyst in Canada

Summary

Mattermost is hiring a results-driven and analytical Governance, Risk & Compliance (GRC) Analyst to help ensure the security and compliance of their company. The GRC Analyst will support and grow the GRC function at Mattermost, maintain and monitor security and privacy policies, collaborate with internal and external resources in conducting compliance audits, manage third-party risk management process for external vendors, and manage and respond to customer and prospect security questionnaires and requests. They are looking for someone with 2 or more years experience in security risk management, information security, or other GRC areas, practical experience with one or more security or risk management standards, excellent analytical skills, ability to manage simultaneous projects, and strong verbal and written communication skills.

Requirements

• 2 or more years experience in security risk management, information security, or other GRC areas
• Practical experience with one or more security or risk management standards (e.g. SOC2, ISO27001, FedRAMP, CMMC, NIST CSF, NIST 800-53)
• Excellent analytical skills and ability to analyze security requirements and relate them to appropriate security controls
• Experience managing simultaneous projects across multiple teams
• Strong verbal and written communication skills with the ability to tailor communication on the other party

Responsibilities

• Support and grow the Governance, Risk, and Compliance function at Mattermost
• Maintain and monitor security and privacy policies and training programs in partnership with other stakeholders
• Support and strengthen privacy and security risk management programs within the organization
• Collaborate with internal and external resources in conducting compliance audits
• Provide reporting on key performance indicators (KPIs) for compliance programs and security risks
• Manage the third-party risk management process for external vendors
• Manage and respond to customer and prospect security questionnaires and requests
• Manage and respond to requests under GDPR/CCPA and other applicable privacy laws

Preferred Qualifications

• Experience in supporting compliance with applicable privacy laws
• Experience in maintaining and implementing public sector compliance requirements