IT Governance, Risk & Compliance (GRC) Analyst 1

Its fun to work in a company where people truly BELIEVE in what theyre doing!
Were committed to bringing passion and customer focus to the business.

If you like wild growth and working with happy enthusiastic over-achievers youll enjoy your career with us!

Lumentum Canada was awarded the 2022 National Capital Regions Top Employers for the 6th consecutive year and the 2022 Career Directory Canadas Best Employers for Recent Graduates for the 5th consecutive year.

Position Title: IT Governance Risk & Compliance (GRC) Analyst 1

Employment Type: Full-time Existing vacancy

Location: Ottawa (On-Site)

About Lumentum

At Lumentum were building the tech behind the worlds fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers telecom and advanced manufacturing.

Were a global team of innovators working where light meets technology solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you youll fit right in.

Why Youll Love This Role

At Lumentum we are searching for Canadas brightest young minds engineers and innovators who want to build the next generation of optical technology. If you are driven by curiosity eager to solve real-world challenges and excited about developing groundbreaking optical systems this is your opportunity.

Join us in designing the future of optical cloud & networking technology our advanced photonic modules power the worlds voice and internet traffic and we need your expertise to take them to the next level. This is not just another job; this is your chance to define & design whats next in photonics.

What Youll Be Doing

The IT Governance Risk & Compliance (GRC) Analyst I supports the organizations information security governance risk management compliance audit and third-party risk management (TPRM) programs. This role assists in maintaining security policies conducting risk assessments supporting internal and external audits evaluating third-party security risks and ensuring compliance with applicable regulatory and industry frameworks. This role works closely with IT Security Legal Procurement Privacy Internal Audit and business stakeholders to ensure that information systems processes and controls align with organizational policies industry standards and regulatory requirements.

The ideal candidate is a proactive detail-oriented professional with strong analytical and organizational skills and a strong understanding of cybersecurity governance risk management and compliance principles. They communicate effectively with both technical and non-technical stakeholders demonstrate a collaborative mindset and are committed to continuous learning and professional growth in cybersecurity governance and risk management.

Responsibilities will include:

Governance & Policy Management

• Assist with maintaining information security policies standards and procedures.
• Help keep governance documentation and policy records up to date.
• Support governance initiatives and promote security best practices.
• Track policy exceptions and follow up on remediation activities.

Risk Management

• Assist with IT and cybersecurity risk assessments.
• Help identify document and track security risks and remediation efforts.
• Maintain the IT risk register and support periodic risk reporting.
• Work with stakeholders to monitor risk mitigation activities.

Compliance & Regulatory Support

• Support compliance activities for frameworks such as ISO 27001 NIST CSF SOC 2 GDPR and CMMC.
• Assist with compliance assessments evidence collection and documentation.
• Help track remediation activities to address compliance findings.
• Support internal and external compliance reviews and audits.

Third-Party Risk Management

• Assist with vendor security assessments during onboarding and periodic reviews.
• Review vendor security documentation including questionnaires and audit reports.
• Track vendor risk findings and remediation activities.
• Maintain third-party risk records on the GRC platform.

Audit Support

• Coordinate audit evidence requests and documentation.
• Track audit findings and remediation activities.
• Help maintain audit readiness across teams.
• Support customer security assessments and certification audits.

Program Improvement

• Support governance risk and compliance initiatives across IT and Security.
• Help monitor compliance metrics risks and remediation progress.
• Assist with identifying process improvements and updating documentation.
• Perform other duties in support of the Information Security team.

What Were Looking For

Education:

• Bachelors degree in information technology Cybersecurity Information Systems Risk Management Business Administration or a related field.
• Equivalent combination of education and experience may be considered.

Preferred Certifications

One or more of the following certifications (or willingness to obtain) is preferred:

• CompTIA Security
• Certified Information Systems Auditor (CISA) (or pursuing)
• Certified in Risk and Information Systems Control (CRISC) (or pursuing)
• Certified Information Security Manager (CISM)
• ISO 27001 Lead Implementer or Lead Auditor
• Security or equivalent cybersecurity certification

Experience:

• 2 5 years of internship or entry-level experience in IT governance risk management compliance cybersecurity IT audit or related fields.
• Experience supporting audits and compliance assessments.
• Familiarity with risk assessment methodologies and control frameworks.

Technical Knowledge

• Working knowledge of:
  • Information Security principles
  • Risk assessment methodologies
  • Governance and compliance processes
  • Security frameworks such as NIST CSF ISO 27001 and SOC 2
  • Microsoft Office Suite (Excel Word PowerPoint) or similar

• Preferred experience with GRC platforms such as:
  • ServiceNow GRC
  • Archer
  • OneTrust
  • AuditBoard

Key Competencies

• Analytical and problem-solving skills
• Attention to detail and organizational skills
• Effective written and verbal communication
• Ability to work independently and as part of a team
• Basic understanding of risk compliance and governance principles
• Customer-focused with strong stakeholder relationship skills
• Ability to manage multiple priorities in a fast-paced environment
• Willingness to learn and continuously develop GRC knowledge

Success Measures

Success in this role is demonstrated by:

• Timely completion of assigned risk assessments compliance activities and vendor reviews.
• Accurate organized and complete documentation and reporting.
• Effective support of internal and external audits including timely evidence collection.
• Consistent tracking and follow-up of risk audit and compliance remediation activities.
• Positive collaboration with business and technical stakeholders.
• Demonstrated growth in GRC knowledge skills and professional development.

Perks Youll Love

• Flexible time off
• Health and wellness benefits (physical and mental)
• Tuition reimbursement and career growth support
• A workplace built for you: free gym games room prayer room
• Subsidized meals free coffee/tea
• Employee stock options and incentive plans
• A collaborative innovative and inclusive culture

Working Conditions

• May require coordination across multiple time zones and business units.

Salary Range: $55000 - $80000 CAD (flexible).

Final compensation will be determined based on factors such as experience skills and line with our commitment to being a great place to work Lumentum offers competitive total rewards which may include annual bonus equity and comprehensive health and welfare benefits.

Join a Team Thats Shaping the Future

At Lumentum were more than just a workplacewere a launchpad for creativity and innovation. Were committed to celebrating your unique talents and helping you grow. Our guiding principlesInnovate Engage Deliver Excel and Winarent just words; theyre the heart of what we do.

Lets Build a Brighter Future Together!

Were committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger sparks creativity and drives our success.

Please contact us at to request accommodation.

Join usyour future starts here!