Senior GRC Analyst

Senior GRC Analyst

Blue J is the leading generative AI solution for tax professionals. As a B2B SaaS company, our customers are accountants and tax experts who rely on our market-leading software to deliver fast, accurate, and defensible answers to complex tax questions. With the launch of our flagship generative AI product, we've consistently exceeded our revenue targets quarter over quarter and continue to accelerate our growth. Our product roadmap is ambitious, customer-focused, and designed to deliver exceptional value at speed. On the heels of our $122M USD Series D funding, we're racing ahead with an exciting product roadmap and are looking for a Senior GRC Specialist to support our growth. Reporting directly to our Senior Manager, GRC, this role will focus heavily on hands-on execution while also contributing ideas to mature our GRC program.

This role is primarily remote, with the expectation of occasional in-person meetings at our Toronto office and some travel for conferences.

This is a unique opportunity to be the hands-on GRC analyst at a high-growth SaaS company that already operates at a strong external standard (SOC 2 Type 2) and sells to discerning legal, tax, and public-sector clients. You'll unblock deals, strengthen our privacy & security posture across multiple jurisdictions (Canada, US, UK/EU), and create the headroom for the team to improve processes without sacrificing day-to-day responsiveness.

What You'll be Doing

• Security questionnaires / sales surveys end-to-end to help Sales move quickly and confidently.
• Support our annual SOC 2 Type 2 activities (evidence collection, control monitoring, audit coordination) and applicable privacy regulation obligations (such as GDPR/UK GDPR, PIPEDA, CCPA/CPRA, etc.).
• Monitor emerging AI-related laws and compliance frameworks to ensure Blue J remains aligned with evolving AI governance requirements; contribute to developing internal readiness in this rapidly growing regulatory space.
• Perform vendor due diligence (new & existing vendors/sub-processors), assess risk, document findings, and track remediation; maintain the vendor inventory.
• Maintain and improve policies & procedures (security, privacy, incident response, acceptable use, access, etc.), ensuring versions, ownership, and review cadence are clear.
• Risk analysis & risk register: run/refresh risk assessments, rate risks, propose controls, and report on trends and treatment status.
• Continuous improvement: identify pragmatic process upgrades that save time, reduce risk, and scale with growth while staying hands-on in daily execution.

What You Offer Blue J

• 3-5 years in GRC or closely related roles, with a bias for action and comfort working as a doer in a lean team.
• Proven experience with SOC 2 Type 2 audits.
• Strong background in vendor due diligence/TPRM, policy management, and risk assessment.
• Excellent written and verbal communication, including the ability to simplify complex compliance topics for customers and internal stakeholders.
• Experience in B2B SaaS, ideally startup/scale-up environments serving regulated or enterprise customers.
• Tooling familiarity with Drata, Vanta, and Jira, and other collaboration and compliance tools.
• Comfortable leveraging AI tools and emerging technologies to drive efficiency, improve workflows, and stay ahead of industry trends.

What We Offer You

• A rare opportunity to be an early team member shaping our security and compliance with visible business impact.
• A mission-driven culture where your work directly advances clarity, efficiency, and accessibility in tax research.
• Competitive base salary, stock options, and benefits designed to support you and your family.
• Flexibility in how you work: primarily remote, with occasional travel to our Toronto office.
• A collaborative, ambitious, and supportive team that values innovation, respect, and fun.
• The excitement of a fast-growing, well-funded company with clear momentum, and the resources to back bold initiatives.

The Core Values that Define Our Culture

• We are customer-focused
• We put the team interest before self-interest
• We are pleasant and playful
• We are open to better ideas
• We deliver on our promises
• We solve the toughest problems

What to Expect in the Interview Process

We anticipate a high volume of applicants for this role and are excited to grow our team. A human will review each application and get back to you as soon as possible. We appreciate your patience and look forward to connecting with you!

Interview Process

• Chat with Elli, Talent Acquisition Manager
• Meet Mark, Senior Manager, GRC
• Present your ideas to the team
• Meet Brett, CTO
• Meet Ben, CEO

We believe our strength is built on diversity of thought, and encourage candidates from all backgrounds and experiences to apply. We value inclusiveness and are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We strive to create an inclusive and accessible hiring experience for all candidates. If you need any accommodations during the interview process, please let us know in your application. Our team is dedicated to providing the necessary support and making reasonable adjustments to ensure a smooth process for everyone.

Compensation

The base pay range for this role is $110-$130k per year. This is a Level 3 in Blue J's career level framework. We use levels to define the expected scope, autonomy, impact, decision-making, and experience for each role. Final compensation will be set fairly and thoughtfully based on experience, expertise, and alignment with the role's responsibilities. While all candidates are expected to bring directly relevant experience, the top of the range is typically reserved for individuals who demonstrate exceptional depth in the role's core competencies, a strong track record of impact in similar environments, and the ability to operate with a high degree of autonomy from day one.