GRC Analyst

Job Description

Senior GRC Analyst:
On behalf of our client in the airline/aviation industry, Procom is searching for 2 Senior GRC Analysts for a contract role. This is a full-time hybrid position (40 hours per week), with the ability to work directly onsite with teams.

Senior GRC Analyst - Job Description:
The contractors will support our client’s Information Technology team in creating a package of evidence for the federal government to demonstrate compliance with the Critical Cyber Systems Protection Act (CCSPA, formerly Bill C-8). They will also analyze the client’s operational technology (OT) security environment. The business purpose is compliance with the CCSPA.

Senior GRC Analyst - Responsibilities:

• Analyze OT environments supporting airline operations, including maintenance and operational support systems
• Identify and document OT assets, data flows, system dependencies, and cyber risks
• Evaluate the effectiveness of existing security controls against industry frameworks and regulatory requirements
• Facilitate risk workshops and interviews with business, operational, and technology stakeholders
• Develop risk assessments, gap analyses, and remediation recommendations
• Support the creation of OT security governance standards, policies, and procedures
• Produce executive-ready reports summarizing findings, risks, and recommended actions

Senior GRC Analyst - Mandatory Requirements:

• Experience in Governance, Risk, and Compliance (GRC), cybersecurity risk assessment, or audit engagements
• Knowledge of Operational Technology (OT), Industrial Control Systems (ICS), or critical infrastructure environments
• Familiarity with cybersecurity frameworks such as NIST CSF, CIS Controls, or ISO 27001
• Strong stakeholder engagement, documentation, and analytical skills

Senior GRC Analyst - Nice-to-Haves:

• Experience in aviation, transportation, or other critical infrastructure sectors

Senior GRC Analyst - Assignment Length:
This is a contract position, effective October 30, 2026 to December 31, 2026.

Senior GRC Analyst - Start Date:
October 30, 2026.

Senior GRC Analyst - Location:
Hybrid, with the ability to work directly onsite with teams.