We’re looking for a Security Analyst- GRC to be part of our Security department at Jobber.
This role is ideal for entry-to-intermediate level candidates in the security, governance, risk and compliance space. This opportunity fits those earlier in their security career, new graduates with internship experience, or those looking to pivot into cybersecurity who bring transferrable SaaS skillsets including strong collaboration and communication skills. Our Security Analyst, GRC, focuses on the governance side of security and is not a technical security operations position requiring specific technical certifications or experience. Our ideal candidate is strong with data and possesses analytical skills.
Jobber exists to help people in small businesses be successful. We work with small home service businesses, like your local plumbers, painters, and landscapers, to transform the way service is delivered through technology. With Jobber they can quote, schedule, invoice, and collect payments from their customers, while providing an easy and professional customer experience. Running a small business today isn’t like it used to be—the way we consume and deliver service is changing rapidly, technology is evolving, and customers expect more. That’s why we put the power and flexibility in their hands to run their businesses how, where, and when they want!
Our culture of transparency, inclusivity, collaboration, and innovation has been recognized by Great Place to Work, Canada’s Most Admired Corporate Cultures, and more. Jobber has also been named on the Globe and Mail’s Canada’s Top Growing Companies list, and Deloitte Canada’s Technology Fast 50™, Enterprise Fast 15, and Technology Fast 500™ lists. With an Executive team that has over thirty years of industry experience of leading the way, we’ve come a long way from our first customer in 2011—but we’ve just scratched the surface of what we want to accomplish for our customers.
The team:
Jobber has a Security team led by our Sr. Director, Security. We have a split focus between governance and operations. All team members are specialized generalists (a primary focus but do a bit of everything). As our team develops and grows you will be collaborating with each member while we work towards making Jobber as secure as possible. We’ll also drive toward team member specialization as we ramp up on capacity and tooling.
The role:
We are seeking a motivated and detail-oriented individual to join our team as a Security Analyst - GRC. Your primary focus will be on governance and awareness, ensuring that our information systems and processes adhere to industry regulations and Jobber best practices. In this role, you will report directly to the Sr.Director, Security and assist in maintaining and enhancing the security posture of our organization. This is an excellent opportunity to gain hands-on experience in the field of information security while working closely with the Jobber Security team.
You'll support a wide range of security initiatives and in the future will have opportunity to specialize as you grow your career.
The Security Analyst - GRC will:
- Aid in the maintenance and application of information security policies, standards, and procedures.
- Participate in regular audits and assessments to ensure compliance with regulatory requirements, industry standards, and internal policies.
- Collaborate with cross-functional teams to identify vulnerabilities and assess the effectiveness of existing controls.
- Contribute to the development and maintenance of security documentation, including risk assessments, control frameworks, and incident response plans.
- Work with leaders throughout the organization to assess and document risks and treatment plans.
- Stay up-to-date with the latest security trends, vulnerabilities, and compliance requirements, and propose recommendations for improvement.
- Distribute risk and governance information through reports and presentations
- Assist in supplier risk assessments and ensure their compliance with Jobber’s security requirements.
To be successful, you should have:
- Excellent analytical and problem-solving skills, with a keen eye for detail.
- Ability to work independently as well as collaboratively in a team environment.
- Strong verbal and written communication skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.
- High level of integrity and confidentiality when handling sensitive information.
- A passion for learning and a drive to stay updated with emerging technologies and security trends.
Nice to have:
- Audit, risk management experience
- Cloud technology specifically AWS
- Startup mindset
All interviews are currently being conducted virtually—via phone or video.
