About the contract role
IT Security Engineer (GRC) on a contract basis to provide maternity leave coverage within the Information Security team. The role will help maintain momentum across core governance, risk and compliance activities, including security policy management, third-party risk assessment, access review coordination, security awareness support and GRC reporting. This is a hands-on individual contributor role suited to someone who can quickly understand established processes, work independently, and provide practical, risk-informed support in a fast-moving, matrixed environment.
Key responsibilities

  • Support the drafting, review, publication and maintenance of security policies, standards and procedures, including updates to the published policy library.
  • Conduct and document third-party risk assessments by reviewing vendor security evidence and maintaining accurate TPRA records.
  • Coordinate periodic access reviews across identity platforms and support policy acknowledgement tracking.
  • Support the design, communication and delivery of security awareness materials, including training content and phishing simulation support.
  • Prepare and maintain GRC metrics, dashboards and reporting inputs for leadership review.
  • Identify practical opportunities to improve GRC processes, documentation and automation where appropriate.

Decision support and influence

  • Provide practical feedback on GRC tooling, including ServiceNow, Graphite Connect and Microsoft 365, based on day-to-day process and reporting needs.
  • Escalate unresolved critical vendor security findings and support risk-based onboarding recommendations.
  • Work with Information Security, Risk, Privacy, Training and Internal Communications stakeholders to keep priority GRC deliverables moving during the contract term.

What we’re looking for — required experience

  • 3+ years of experience in GRC, IT audit, security compliance or a related information security role.
  • Strong policy authoring, communication and technical writing skills.
  • Experience reviewing security evidence against established frameworks, standards or certifications such as SOC 2, ISO 27001 or equivalent control frameworks.
  • Working knowledge of security principles such as identity and access management, vulnerability management, security operations, encryption and third-party risk.
  • Ability to work independently, manage multiple priorities and translate technical risk into clear business-facing recommendations.

Preferred experience

  • Hands-on experience with any of the following platforms: ServiceNow GRC, Graphite Connect, Confluence, Microsoft 365 or Copilot.
  • Experience supporting security awareness, phishing simulations, vendor risk management or access review processes.
  • CISA, CRISC, CISM or equivalent certification is an asset.

How success is measured

  • Priority policy updates, reviews and publication activities are completed on agreed timelines.
  • Vendor security assessments are completed before onboarding decisions, with clear documentation of findings, risks and recommended next steps.
  • Access reviews, policy acknowledgements and awareness activities are coordinated, tracked and reported with minimal disruption during the maternity leave period.
  • Leadership receives timely, clear and risk-informed GRC reporting inputs.

Key stakeholders: Information Security; Risk and Privacy; Training and Internal Communications.
What this contract offers: an opportunity to contribute to a practical, business-facing GRC programme; work across policy, vendor risk, awareness and reporting; and provide visible support to Information Security leadership during a defined maternity leave coverage period.
 

The pay range that the employer reasonably expects to pay for this position is between CA$35.00 and CA$45.00

Our voluntary benefits offering includes medical, dental, vision and retirement benefits.

This posting is for an existing vacancy.

If you believe this post to be fraudulent, please report by clicking here

Tundra Technical Solutions is a global workforce and technology delivery firm, ranked by Staffing Industry Analysts as one of the largest in North America. At Tundra, we aren't just hiring top talent at the world's most recognizable brands; we are pioneers of social recruitment. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics. We welcome and encourage diversity in the workplace.

We use artificial intelligence tools to help our recruiters screen and assess talent. These tools do not replace human decision making in the process.

Not interested in this position, but know somebody who might be? Check out our Referral Reward Program, referrals are a big secret behind our success. As always, we’re on the lookout for great people. And we know that you know great people!