GRC/Compliance Lead - Canada

GRC/Compliance Lead

This is a remote, client-facing consultant role with Inviso. In this position, you will support an external software development organization as part of Inviso’s delivery team, helping establish practical, engineering-friendly governance, risk, and compliance practices for an enterprise AI platform.

The Inviso GRC / Compliance Lead is responsible for helping define, operate, and mature a compliance program for a multi-tenant enterprise platform serving regulated and mission-critical customer environments. This role focuses on SOC 2 and ISO readiness, controls, evidence collection, customer security documentation, audit preparation, data handling, and compliance-by-design.

The ideal candidate understands how to build credible compliance practices without slowing delivery. This role requires strong partnership with engineering, security, product, auditors, customer security teams, and client stakeholders.

This is a 100% remote role but may require some travel due to client needs.

Experience & Skills Required

• Experience owning or supporting a security, governance, risk, or compliance program in a B2B SaaS, platform, or enterprise software environment.
• Experience with SOC 2, ISO 27001, or similar compliance frameworks.
• Ability to define controls, map requirements, collect evidence, track gaps, and support audit readiness.
• Experience preparing customer-facing security documentation, security questionnaires, DPAs, policies, or compliance materials.
• Ability to partner with engineering and security teams to make controls practical, repeatable, and automation-friendly.
• Experience advising on data handling, retention, access control, regulatory obligations, and customer assurance needs.
• Ability to prepare for and support audits, customer security reviews, and compliance assessments.
• Strong documentation, organization, follow-through, and stakeholder management skills.
• Strong communication and collaboration skills for client-facing consulting environments.
• Pragmatic mindset with the ability to support delivery while maintaining credible compliance standards.

Desired Qualifications

• Experience taking a company or product through SOC 2, ISO 27001, or a comparable certification process.
• Experience automating evidence collection or integrating compliance into engineering workflows.
• Familiarity with GDPR or other major data protection and privacy regimes.
• Experience with AI governance, responsible AI practices, model risk, data governance, or compliance for AI-enabled products.
• Experience with enterprise-scale B2B SaaS, regulated customer environments, or mission-critical software.
• Relevant compliance, audit, security, privacy, or risk certifications are a plus.

Success Criteria

Success in this role is measured by practical compliance execution, audit readiness, clear evidence management, effective customer assurance, and the ability to help client teams build compliance into the platform from the start. GRC / Compliance Leads are expected to reduce risk, improve customer trust, and support credible delivery without creating unnecessary friction.

Benefits:

In addition to the base pay, Inviso provides an annual $2,000 training allowance to all of its employees, plus paid time off, paid holidays, and other benefits.

Why Inviso?

• Our Culture & Values are who we are.
• Our commitment to excellence is interwoven with the way we care about our people. Our low attrition rate, high average employee tenure, and the number of people that have been with Inviso for 10, 15, even 20 years, speaks volumes to who we are as a company.
• We are a meritocracy through and through. Those who excel, grow. There is no ceiling, we don’t tolerate politics.
• Inviso has maintained a deep, well-established relationship with Microsoft for over 20 years. We are a top-rated supplier and are proud to be a Managed Partner with many credentials.