GRC Document Management Specialist

Role: GRC Document Management Specialist

Location: Remote, Canada

Mode: Contract

Role Overview

We're seeking an EDMS & GRC Document Management Specialist to support a client's Operational Technology (OT) Cybersecurity program. The client is deploying a GxP-validated EDMS web portal as the official repository for sensitive OT cyber governance documentation, migrating from Box. The specialist will serve as the day-to-day operational owner of the portal - managing the validation phase, go-live preparation, and ongoing platform ownership - while also helping the team design a sustained service model for threat detection as a service, transitioning from a project-based approach to a repeatable service model for new site onboarding.
This is a governance and operations role. It is not a software development position. The focus is platform administration, workflow management, access governance, and service process design.

Key Responsibilities



Validation Phase

• Submit and manage User Requirements for both the OT EDMS portal and EDMS viewer
• Coordinate with the EDMS technical team to gather any required metrics or inputs
• Lead sign-off of requirements and coordinate UAT testing across all user roles

Go-Live Preparation

• Conduct office hours for end users pre and post go-live
• Develop role-based training materials; create job aids as needed
• Build and maintain the IAM Security Matrix defining which roles require ISRM approval and which can be automated
• Coordinate with the IAM team on automation scoping and cost

Ongoing Platform Ownership

• Onboard new sites and manage onboarding of new users including author/approver role changes
• Enforce and assure document nomenclature standards across all submitted documents
• Monitor and resolve documents stuck in draft or approval stages; investigate and remediate stalled workflows
• Manage the security model and conduct periodic NAGS (access) reviews
• Maintain training content as the platform and processes evolve
• Field and resolve day-to-day portal questions from end users
• Track periodic document reviews to completion; manage late review handling and produce on-time/late metrics
• Process role approval requests in the IAM system

Migration

• Work with the EDMS technical team to migrate existing signed documents from Box into the new OT EDMS portal

Service Design

• Partner with the client team to design the sustained operational process for OT threat detection as a service
• Help transition the current project-based model into a scalable, repeatable service model for new site onboarding

Required Qualifications

• 4 7 years of experience in GRC, document management, or quality systems operations
• Hands-on experience with a GxP-validated EDMS or quality management platform (e.g., Veeva, MasterControl, OpenText, ETQ, or similar)
• Understanding of document control workflows, approval routing, periodic review processes, and access governance
• Experience with IAM/access matrix design and role-based access management
• Familiarity with GxP validation activities including User Requirements, UAT, and sign-off processes
• Strong process design and documentation skills
• Ability to work independently under remote management across time zones

Preferred Qualifications

• Familiarity with OT/ICS cybersecurity governance frameworks (NIST, IEC 62443)
• Prior experience with document migrations from Box or SharePoint into a formal EDMS
• Experience designing or transitioning project-based programs into service models
• Background in regulated industries (Life Sciences, Pharma, or similar GxP environments)