Senior GRC Analyst

Responsibilities

• Manage security questionnaires and sales surveys end-to-end to support the sales cycle.
• Support annual SOC 2 Type 2 activities, including evidence collection, control monitoring, and audit coordination.
• Ensure compliance with privacy regulations such as GDPR, PIPEDA, and CCPA/CPRA.
• Monitor emerging AI-related laws and compliance frameworks to ensure alignment with evolving AI governance requirements.
• Perform vendor due diligence, assess risk, document findings, and maintain the vendor inventory.
• Maintain and improve internal policies and procedures regarding security, privacy, and incident response.
• Conduct risk analysis and manage the company risk register.

Requirements

• 3-5 years of experience in GRC or closely related roles.
• Proven experience managing SOC 2 Type 2 audits.
• Strong background in vendor due diligence (TPRM), policy management, and risk assessment.
• Experience working in a B2B SaaS environment, ideally within a startup or scale-up.
• Excellent written and verbal communication skills for interacting with customers and internal stakeholders.
• Familiarity with compliance and collaboration tools such as Drata, Vanta, or Jira.

Preferred Qualifications

• Experience navigating compliance requirements for regulated legal, tax, or public-sector clients.
• Ability to leverage AI tools to drive workflow efficiency and stay ahead of industry trends.

Benefits

• Competitive base salary and stock options.
• Comprehensive benefits designed to support you and your family.
• Flexible, primarily remote work environment with occasional travel to the Toronto office.
• Opportunity to be an early member of a high-growth, well-funded team.

About the Company

Blue J is the leading generative AI solution for tax professionals. As a B2B SaaS company, we provide accountants and tax experts with market-leading software to deliver fast, accurate, and defensible answers to complex tax questions. Following our $122M USD Series D funding, we are rapidly expanding our product roadmap and scaling our global operations.