IT Risk and Compliance Analyst

We're looking for an ambitious and coachable IT Risk and Compliance Analyst to join our Security department.

The IT Risk and Compliance Analyst will report to the Senior Director, Security & Compliance and play a critical role in maintaining and maturing Rival Group Inc.'s IT Security and Compliance program. The IT Risk and Compliance Analyst will ensure systems and processes are continually developed and actioned in alignment with audit standards, client agreements, and internal policies. They will collaborate with stakeholders across the company as a champion of IT Compliance and Information Security programs.
Who are we?

When you join Rival Group, you're not just accelerating your career-you're also helping shape the future of customer insights and market research.

We're a forward-thinking, results-driven organization obsessed with helping innovative brands get closer to their customers in a way that feels fresh, organic, and fun. Rival Technologies, the tech arm of our business, is the world's best conversational research platform and one of Vancouver's fastest-growing tech companies. Reach3 Insights, our consulting side, is an award-winning market research agency with offices in Chicago, Toronto, and Vancouver. Together, we're helping brands like Coca-Cola, Kellogg's, Dell Technologies, REVOLT TV, and Roblox get better insights they can use to deliver better products, create more impactful marketing campaigns, and improve the end-to-end customer experience.

Our customers LOVE our tech and services. We're growing fast-and we're inviting great people to join us on the ride

If making measurable, immediate impact while having fun sounds like your jam, then we invite you to apply!
What you'll do:

• Maintain the IT Security Compliance Program and recurring compliance activities in alignment with internal processes and audit requirements
• Working closely with the Snr Director, Security & Compliance and senior executives
• An enthusiastic professional committed to fostering and elevating a culture of security awareness across the organization
• Key stakeholder in the company's SOC2 Type II, ISO27001:2022, and HIPAA audits and related activities
• Interacting with external auditors on matters related to audits of the organization's internal controls
• Plays an active role in the Risk Assessment and Risk Management process
• Plays an active role in the onboarding and reviewing of vendors in alignment with Third-Party Assessments and Vendor Management
• Maintains and coordinates the preparation and ongoing review of InfoSec policies, procedures, training materials, and other documentation as they relate to Information Security
• Point of contact for internal inquiries regarding information security and notifies staff of security-related updates (security advisories and educational bulletins) via internal communication channels
• Coordinating with third-party penetration testers for annual pen tests
• Manages IT Security Compliance project deliverables
• Conducting annual tabletop exercises, such as for Business Continuity, Disaster Recovery, Incident Response

What You'll Have:

• Bachelor's degree in business, social sciences, or computer science
• 3-5 years' experience working in the field of Governance, Risk, and Compliance
• Demonstrated ability to learn and succeed in a fast-paced, technical environment with changing priorities
• Excellent critical thinking and analytical ability
• Advanced interpersonal and communication skills (oral and written), proficiency in English
• Understanding of information security concepts and IT functions
• Experience auditing in cloud environments, familiarity with AWS and serverless environments
• Knowledge of privacy frameworks including GDPR, CCPA, COPPA, and PIPEDA
• Strong knowledge of security audit standards such as SOC2, ISO27001, and HIPAA
• Understanding of artificial intelligence (AI) and machine learning technologies, including their applications and implications for information security is considered an asset
• Detail-oriented and highly organized, experience in project management is considered an asset

Preferred Qualifications:

• CISA, CISM, CISSP, PMP, or similar.
• Demonstrated experience in building scalable business processes across departments.
• Familiarity with the Market Research industry.

Why us for your next career adventure?

Fair compensation

We're committed to pay equity/fair pay practices and closing the gender salary gap.

• Pay range for this role: $90,000 - $97,000 CAD depending on experience

Our compensation package also includes:

• Stock options
• RRSP plan with employer matching
• Parental leave top up

Flexibility and time off

• Hybrid working model and home office benefits
• 4 weeks of vacation as the standard

Health and wellness

• 100% employer-paid health and dental plan
• Generous sick, personal, and mental health days
• $1,000 annual enhanced mental health benefits

A great place to work you can be proud of

According to a survey of our employees conducted by an independent agency:

• 91% of our people believe management practices are equal and impartial
• 86% have pride in their work and the organization
• 91% agree that their teammates are friendly, supportive and welcoming

Our values at Rival:

• Courage
• Results
• Energy
• Kinship

The not-so-fine-print

If you think you're a good fit, please connect with us ASAP with your resume. You must be eligible to work in Canada to be considered for this role. At Rival, we value the unique qualities and experiences that each candidate brings to the table. We believe in a personal approach to hiring and take the time to thoroughly review each resume ourselves. Rest assured, we do not use AI or automated systems to review or filter resumes. Every application is carefully reviewed by our hiring team to ensure a fair and personalized evaluation process. If you don't see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that individuals in underrepresented groups often only apply when they feel 100% qualified. We are proud to be an equal opportunity workplace committed to building a team culture that celebrates diversity and inclusion. Rival provides equal employment opportunities to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.

Rival is also committed to fostering a culture of belonging, which includes ensuring an accessible work environment and employment practices. If you require accommodation at any point in the selection process, please email [redacted]

Finally, we know from time to time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility.

Please note given our security and compliance certifications, final applicants will be required to undergo a background check.

No recruiters and no phone calls, please!