Senior Governance, Risk, & Compliance Consultant
About the Company
Elastify is an IT consulting firm with a deep focus on security and compliance services.
Based in Toronto with a presence across North America, our people are united by our core values and a shared commitment to simplifying IT for those we serve.
We approach engagements with a client-centred mindset and consider ourselves a natural extension of their teams.
Our flexible, on-demand service model provides access to the right skillsets and solutions needed to meet the demands of our clients.
We specialize in delivering high value services and provide advisory within :
- Governance, Risk & Compliance (GRC)
- Cybersecurity Engineering
- Penetration Testing
- Data Protection & Privacy
- Cloud Security
- Microsoft Enablement
- Staff Augmentation
The Elastify business has grown 170% YoY, generating over $70 million in recognized revenue in just four years. With over 100 active contracts being delivered on each month, there is great opportunity to get involved to leave your mark on the growth of Elastify, while developing lasting relationships in a growing industry.
About the Senior GRC Consultant Position
Within Elastify’s security practice, we are currently seeking a Senior Cyber Risk Consultant to assist our growing engagement team in assessing our client’s security processes and controls.
Job Responsibilities
- Leading & delivering compliance readiness assessments (e.g., SOC 2, ISO 27001, PCI DSS).
- Running workshops with clients.
- Support remediation activities (e.g., policy, procedure, documentation development).
- Assist in designing and implementing relevant controls for industry leading security and compliance frameworks.
- Maturing client’s business resilience, including the development of business continuity, disaster recovery, and incident response plans.
- Facilitate Incident Response Tabletop exercises.
- Drafting & presenting reports and findings to key client stakeholders.
- Managing the delivery of engagements to ensure budgets and timelines are met.
- Helping clients with data protection and privacy readiness (HIPAA, GDPR, PIPEDA, Quebec Law 25 etc.).
- Conduct Risk and Privacy Assessments (TRA, TPRM, PIA etc.).
- Implement and work with compliance automation platforms to conduct assessments or provide advisory to clients.
- Conducting information system audits.
- Advising clients with security best practices (People, Process, and Technology).
- Supporting Elastify’s pre-sales activities (proposals, engagement letters / statement of work development).
Experience
- Four to seven years of experience in the field of Cybersecurity, Technology Risk, or GRC
- Completion of at least one of the following designations : CISA, CRISC, CISM, CISSP, ISO 27001 LA.
- Bachelor’s degree or higher in a related field to Cybersecurity or equivalent working experience
- Experience with leading and delivering assessments against the follow standards & frameworks including but limited to SOC 2, NIST CSF, NIST 800-53, CMMC, ISO 27001, CIS.
- Experience with Compliance & Controls Automation Platforms (e.g. Drata)
- Strong attention to detail and organizational skills.
- Experience leading, coaching, mentoring junior personnel.
- Excellent oral and written communication with experience helping clients navigate through complex cybersecurity and compliance challenges.
Benefits of working at Elastify
- Three weeks’ vacation
- Benefits package
- Wellness Account
- Cellphone and Travel allowance
- Downtown Toronto office location (121 King Street West - connected to the path)
- Hybrid work
Senior Data Risk Consultant (Data Governance & Taxonomy)
Senior Data Risk Consultant (Data Governance & Taxonomy). We are seeking a Senior Data Risk Consultant to join the Governance Adherence and Oversight team. We are seeking a Senior Data Risk Consultant to join our clients team. Collect, organize, and analyze risk data assessments to create reports an...
DevSec Ops, Cyber Risk, Consultant/Senior Consultant
Our national practice is growing and we are seeking a new Consultant/Senior Consultant to join our talented team! As a Consultant/Senior Consultant, you will:. Deloitte's Cyber Risk Services helps our clients to be Secure, Vigilant and Resilient in the face of an ever increasing array of cyber threa...
Senior Energy Consultant - Risk, Compliance & Security
Senior Consultants In this role, the candidate will support the Security and Compliance team in its efforts to assist clients with cyber and physical security, grid reliability, risk management and/or utility wildfire mitigation. Senior Consultants work closely with, Managing Consultants, Associate ...
Senior Manager, Cyber Strategy, Risk Advisory
Deloitte's Cyber Security practice advises organizations across many industries on how to effectively reduce vulnerability, mitigate cyber risks and make informed decisions as they elevate their security postures to address an evolving and increasingly complex threat environment. Reporting to senior...
Senior Marketing Manager, Global Risk & Cyber Security
Lead the development, management and implementation of key global Risk and Cyber Security marketing campaigns, in coordination with the national member firms. This role works with Risk and Cyber Security leadership team who are located around the world, as well as regional and national marketing man...
Senior Consultant, Risk Services, Public Sector
Our Governance, Risk and Compliance Services (GRCS) professionals provide a range of risk advisory services to organizations including financial and operational internal audits, internal control advisory services, enterprise risk management support, assessments of third-party relationships, regulato...
Senior Consultant, Cyber Strategy
Cyber Strategy services engagements in which Senior Consultants are involved vary widely: from maturity assessments to guidance and support in establishing actionable roadmaps, as well as supporting security programs or acting as a Subject Matter Expert on cyber topics. Our Cyber Risk Services help ...
Senior Consultant, Emerging Technology - Risk Advisory
Infrastructure, Governance and Application Security are critical parts of Deloitte's Cyber Risk Services practice, which helps our clients be Secure, Vigilant and Resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk Services help organizations with t...
Senior Consultant - Technology Risk Services
Our Technology Risk Services team is growing and we are looking for Senior Consultants to join our team in Toronto. The successful candidate will focus primarily on performing IT risk reviews or providing IT internal audit support across the IT risk domain. Senior Consultants will also be involved i...
Senior Consultant - ESG Climate Risk
As an ESG/Climate Risk Modelling Senior Consultant you will provide subject matter expertise on climate risk in the context of risk modelling and measurement, stress testing, risk management, strategy, and regulatory expectations. ESG/Climate Risk Modelling Senior Consultants. EY's Financial Service...