[Hiring] GRC Specialist @Miovision

Role Description

At Miovision, we are engineering the future of smart transportation, but keeping our massive data highways safe requires serious guardrails. We are looking for a GRC Specialist to act as our ultimate risk traffic controller. Sitting within the Office of Cybersecurity, you will operationalize our Unified Risk Management Framework, ensuring our products, cloud platforms, and enterprise systems navigate the complex intersections of global industry standards without ever hitting a compliance roadblock. If you are ready to steer our risk registers, keep our audit readiness cruising in the fast lane, and ensure security is a green light for business growth rather than a bottleneck, buckle up and merge into our team!

Objectives and Responsibilities

• Risk & Control Execution
  • Identify, assess, and track enterprise, cyber, product, and third-party risks, actively expanding our cybersecurity risk universe.
  • Maintain risk scoring, treatment plans, and evidence in strict alignment with frameworks like ISO 27001, SOC 2, and NIST.
  • Drive risk remediation and manage risk acceptance workflows, ensuring clear justifications and proper executive approvals.
• Governance, Risk & Compliance (GRC) Program Operations
  • Drive day-to-day GRC operations across ISO 27001, SOC 2, and NIST, intelligently mapping controls to eliminate duplication and boost efficiency.
  • Collect and validate rock-solid evidence for internal assessments while managing the lifecycle of our security policies and standards.
  • Proactively research, recommend, and implement high-impact process improvements to streamline compliance efforts.
• Audit & Assurance Support
  • Bridge the gap between theoretical certification requirements and operational reality by building robust audit playbooks and practical controls.
  • Serve as a key player during critical external audits, coordinating with internal control owners to ensure lightning-fast, highly accurate evidence submission.
  • Craft accurate, confident responses to customer security questionnaires, RFPs, and due-diligence requests to accelerate sales.
• Cross-Functional Enablement
  • Partner with Engineering, Cloud Ops, IT, and Product to seamlessly embed risk considerations into development, operations, and vendor onboarding.
  • Act as a key risk gatekeeper for product releases and major delivery milestones, operationalizing highly scalable security controls.
  • Drive highly engaging security awareness training and clear risk communications across the entire business.
• Risk Culture & Cross-Functional Engagement
  • Champion security best practices and act as an approachable advocate to non-technical, cross-departmental teams.
  • Spearhead engaging initiatives that build and reinforce a highly resilient, company-wide security culture.
  • Actively participate in cross-functional risk forums and working groups to keep security top-of-mind across the organization.
• Emerging Leadership & Development
  • Take total ownership of key GRC components (like third-party risk or policy governance) to continuously hone your skills as an independent practitioner.
  • Drive process automation and program maturity, securely leveraging AI tooling to accelerate and optimize your workflows.
  • Partner directly with the GRC Manager to support executive reporting and execute high-level strategic initiatives.

Qualifications

• Experience in GRC, cyber risk, compliance, or information security, ideally within SaaS, cloud, or critical-infrastructure environments.
• Deep, practical working knowledge of at least three major frameworks (ISO 27001, SOC 2, NIST, FedRAMP, FAIR, or COSO).
• Ability to explain a control gap to an engineer and successfully get it fixed without causing friction.
• Proactive self-starter who has independently taught yourself new frameworks, tools, or systems.
• Highly proficient with modern GRC platforms and proven ability to build and operate risk registers and control frameworks.
• Effective at using AI to speed up workflows while possessing sharp judgment to spot inaccuracies.
• Exposure to the strict, high-stakes requirements of public-sector or highly regulated customers.

Benefits

• Comprehensive health benefits, 24/7 virtual healthcare access, and dedicated wellness programs.
• RRSP/401K Matching Plan and Variable Incentive Plan.
• Unique Mio-Days and flexible vacation policy.
• Flexible work options, internet subsidy, remote work allowance, and enhanced leave for new parents.