# Senior GRC Analyst - Central or Eastern time, US or Canada at Shift Technology

- Company: Shift Technology
- What the company does: Backed by Accel, Bessemer and General Catalyst.
- Company website: http://www.shift-technology.com
- Type: Startups (AI role)
- Level: Senior
- Location: Canada - Remote; Canada - Toronto; US - Boston; US - Remote
- Work setup: Remote
- Posted: 2026-09-22
- Apply by: 2026-11-06
- Apply: https://job-boards.greenhouse.io/shifttechnology/jobs/8002510003
- Page: https://www.1752.vc/careers/jobs/shift-technology-senior-grc-analyst-central-or-eastern-time-us-or-canada/

## About the role

As a Senior GRC Analyst, you will be a cornerstone of Shift’s security program, responsible for developing, maintaining, and assessing our integrated security and privacy management framework. You will manage our compliance with key industry standards, lead risk assessments, oversee our third-party security assurance program, and support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence.

## What they're looking for

- 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role
- Bachelor’s Degree in a relevant field or equivalent work experience
- Professional certifications such as CIPP/E, CIPP/US, CIPT CISA, CISM, CRISC, or CISSP are highly desirable
- Direct experience of delivery in highly regulated industries, i.e financial services, healthcare
- Direct experience managing or supporting formal audit and certification processes from start to finish
- Deep knowledge of security and privacy frameworks is required (e.g., ISO 27001, ISO27701, SOC 2 Type II, HITRUST, NIST CSF)

Tags: Technology - Software Engineering,...