Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Governance Risk and Compliance, ISO 27001, SOC 2, NIST, PCI DSS
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: AI-Led Development, Cloud Infrastructure, Software Development Management, Agentic Software Development, SaaS Product Development
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Paid Media Management, Performance Marketing, Search Engine Optimization, Account Based Marketing, Google Ads
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Paid Media Management, Performance Marketing, SEO/AEO, Google Analytics, Google Tag Manager
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Specialist, Events & Communications - 12 Month Term
Calgary, Alberta, Canada · Hybrid
Mid level$69M raised
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Financial Modeling, FP&A, Strategic Finance, Data Analysis, Cross-functional Collaboration
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Financial Modeling, FP&A, Strategic Finance, Data Analysis, Cross-functional Collaboration
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Privacy Program Management, GRC, GDPR Compliance, CPRA/CCPA, PIPEDA
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Full Stack Development, Software Architecture, Domain Driven Design, Java, Spring Boot
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Governance Risk and Compliance, ISO 27001, SOC 2, NIST, PCI DSS
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Enterprise Architecture, Data Engineering, AI Solutions, AIOps, Cloud Computing
Meet Benevity Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee re…
Skills: Enterprise Architecture, Data Engineering, AI Solutions, AIOps, Cloud Computing
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
$56k–$77k/yr
Full-time
Posted 3d ago
~40 hrs/week
Responsibilities
The GRC Analyst supports the security governance, risk, and privacy program by maintaining policies and conducting risk assessments. They are also responsible for managing audit readiness, responding to client security questionnaires, and ensuring compliance with global regulatory frameworks.
Requirements
Candidates should have 2-4 years of experience in cybersecurity GRC or privacy, ideally within a SaaS environment. Proficiency with frameworks like ISO 27001, SOC 2, and GDPR, along with experience using GRC tooling, is required.
Full job description
Meet Benevity
Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more!
High-Level Overview Benevity is seeking a Governance, Risk & Compliance (GRC) Analyst to support and grow our security governance, risk, privacy, and regulatory program. In this role, you will contribute to the execution of Benevity’s GRC program by supporting compliance activities, assisting with risk assessments, contributing to third-party risk management, responding to client due diligence requests, and helping maintain the policies and controls that strengthen trust with our clients, partners, and stakeholders.
Working alongside experienced GRC professionals, you will build your skills in information security, compliance, and risk management while helping ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements. This is a hands-on role with significant learning and growth opportunities across governance, risk, audit, and privacy domains.
What you'll do:
Governance & Policy
Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
Support policy exception management, attestation processes, and identify opportunities for process improvement.
Risk Management
Assist with enterprise risk assessments, including vendor and process-level reviews.
Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning.
Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
Compliance & Audit
Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
Assist with evidence gathering, control validation, and auditor engagement.
Leverage GRC platforms to support audit, privacy, and compliance workflows.
Client Support & Sales Enablement
Support the sales process by responding to client inquiries related to security, privacy, and compliance.
Partner with sales and client success teams to provide timely, accurate responses that build client trust.
Privacy and Regulatory
Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations.
Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.
Advisory & Awareness
Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives.
Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership.
Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations.
Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.
What you'll bring:
2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment. (For a Junior GRC Analyst, we welcome candidates with 0–2 years of experience, including relevant internship, co-op, or academic project experience.)
Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA.
Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to support policy, risk, audit, privacy, and vendor risk workflows.
Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering.
Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders.
Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving.
An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus.
Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.
Discover your purpose at work
We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more …
Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.
If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become …
It’s time to join Benevity. We’re so excited to meet you.
Where We Work
At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there’s no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most.
Join a company where DEIB isn’t a buzzword
Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily — from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams.
We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine.
That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity.
Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to [email protected].
Related keywords
ISO 27001SOC 2NISTPCI DSSGDPRPIPEDAFINTRACCCPA/CPRAOneTrustHyperproofSecurityPalAuditBoardDrataSaaSAML/ATFSecurity+
Helping the world’s top brands create social impact.
Industry
Software Development
Company size
501-1,000 employees
Founded
2008
Headquarters
Calgary, Alberta
LinkedIn followers
61,625
Total funding
$69M
Benevity is the first Enterprise Impact Platform that scales corporate impact by embedding purpose into business strategy while ensuring trust, security and measurable outcomes. Purpose is the future of business, and Benevity helps you harness it. We're not just a platform; we're your purpose at work, woven into the fabric of your business and enabling measurable, global impact you can see. Let's make purpose the way business gets done.
A certified B Corporation, recognized in Fortune's Impact 20 and named one of Fast Company’s 2026 Most Innovative Companies, we empower iconic brands to attract, retain and engage diverse workforces, embed social action in customer experiences, support communities and understand their impact in the world.
Since our founding in 2008, Benevity has supported more than $44 billion to more than 560,000 nonprofit organizations and enabled over 7.7 million changemakers worldwide.
Offices: 611 Meredith Rd NE, Calgary, Alberta T2E, CA · Quai de l’Ile 13, 1204, Geneva, CH · C/ de Provença, 339, Barcelona, 08037, ES
Mobile GivingVolunteeringOnline GivingCharity Vetting & Due DiligenceDonation ManagementDonation ProcessingEmployee EngagementSoftware as a ServiceCorporate PurposeInternational Giving
Helping the world’s top brands create social impact.
Industry
Software Development
Company size
501-1,000 employees
Founded
2008
Headquarters
Calgary, Alberta
LinkedIn followers
61,625
Total funding
$69M
Benevity is the first Enterprise Impact Platform that scales corporate impact by embedding purpose into business strategy while ensuring trust, security and measurable outcomes. Purpose is the future of business, and Benevity helps you harness it. We're not just a platform; we're your purpose at work, woven into the fabric of your business and enabling measurable, global impact you can see. Let's make purpose the way business gets done.
A certified B Corporation, recognized in Fortune's Impact 20 and named one of Fast Company’s 2026 Most Innovative Companies, we empower iconic brands to attract, retain and engage diverse workforces, embed social action in customer experiences, support communities and understand their impact in the world.
Since our founding in 2008, Benevity has supported more than $44 billion to more than 560,000 nonprofit organizations and enabled over 7.7 million changemakers worldwide.
Offices: 611 Meredith Rd NE, Calgary, Alberta T2E, CA · Quai de l’Ile 13, 1204, Geneva, CH · C/ de Provença, 339, Barcelona, 08037, ES
Mobile GivingVolunteeringOnline GivingCharity Vetting & Due DiligenceDonation ManagementDonation ProcessingEmployee EngagementSoftware as a ServiceCorporate PurposeInternational Giving