"Absorb is a unique type of organization that everyone should have the opportunity to experience at some point in their career. We’re a company focused on learning, and every day brings opportunities to learn new skills and take on new challenges. What truly makes Absorb special, though, is working alongside people who are committed to being right there with you as you learn and overcome these challenges."- Aaron Forrester, COO

The Senior GRC Analyst will drive the strategic direction and operational execution of Absorb's Governance, Risk, and Compliance (GRC) program. Collaborating closely with IT, CloudOps, DevOps, and Contracts teams, this role will ensure regulatory adherence, risk mitigation, and process excellence across the organization.

Would you like to learn more about the Absorb culture? Listen here:

Absorb Software: Remote Work Culture

What you’ll do:

• Establish and oversee a robust risk management framework, including self-assessments for Information Services systems and processes.
• Lead compliance efforts for PCI and GDPR, ensuring adherence to industry standards and data protection regulations.
• Develop and maintain a comprehensive vulnerability management program to proactively identify and address security risks.
• Collaborate with Contracts and Legal teams to ensure procurement processes and client agreements align with GRC requirements.
• Drive vendor risk management activities, assessing and mitigating third-party risks.
• Author, review, and update security policies, standards, guidelines, and baselines to reflect best practices and regulatory changes.
• Champion the company-wide Security Awareness & Training program, promoting a robust security culture.
• Conduct extensive research and training to maintain expertise in security trends, privacy regulations, and emerging risks.
• Define, track, and report GRC-related KPIs to executive leadership on a regular cadence.
• Coordinate and participate in annual external audits and assessments.

What you’ll bring:

• In-depth knowledge of PCI, GDPR, and industry security frameworks (e.g., ISO 27001/27003, NIST CSF, NIST 800-53).
• Advanced expertise in risk management design and implementation.
• Professional security management certification (e.g., CISSP, CISM, CISA) preferred.
• Proven experience in designing and managing a comprehensive GRC framework.
• 5-7 years of progressive experience in Information Security Governance, Risk, and Compliance roles.
• Exceptional problem-solving, project management, and organizational skills.
• Strong written and verbal communication abilities, with the capacity to articulate complex technical concepts.
• Ability to work independently, prioritize tasks, and adapt to changing priorities.
• Commitment to maintaining confidentiality and exhibiting the highest level of integrity.

Are you ready to become an Absorber?

What we offer:

• Fully remote-first work with flexible work arrangements.
• Comprehensive Health and Wellness Benefits including retirement savings programs, eligibility for two different bonus plans, generous time off, comprehensive medical and dental benefits based on your country of location.
• New Hire Equipment Allowance and monthly Flex Allowance to support your success.
• Endless opportunity for career growth and internal mobility
• Employee driven DE&I programs.
• Games room, meditation & yoga space, state of the art workplace for Absorbers in our Calgary office.

Who are we?

Absorb Software is a remote-first company that provides online training solutions to leading organizations around the world. Absorb is a cloud-based learning management system (LMS) engineered to inspire learning and fuel business productivity. Our online learning platform combines forward-thinking technology built to scale as our customer’s organizations grow. We empower learners to enrich their lives, workplaces and communities.

Our values are simple:

• We achieve exceptional results by genuinely caring about each other and the work we do.
• We’re united, and we grow through our commitment to elevating continual learning!

Absorb is proud to be an equal opportunity employer, we celebrate diversity and are committed to creating a safe and inclusive environment for all our people. All employment decisions are based on business needs, job requirements and individual qualifications. In the event a current Absorb employee would like to apply for this role they will inform their supervisor prior to submitting their application. Successful candidates for this position will be subject to pre-employment background screening, including a criminal record check and must be able to show proof of legal eligibility to work in the country they have applied to without sponsorship.

Should you require any accommodation during the recruitment process, please indicate this on your application and we will work with you to meet your accessibility needs. For any questions, please contact us at accessiblecareers@absorblms.com

#LI-REMOTE