At Wagepoint, we’re good people. Sure, maybe we’re biased. But that’s only because Wagepointers bring the best versions of ourselves to do some of the best work in our careers.

We’re an authentic team who bring our diverse backgrounds, ideas, experiences and cultures together to make payroll magic. Speaking of, we “pull rabbits out of hats” for 20,000 small business owners across the US and Canada who rely on our payroll software to pay their employees and process their taxes. And we’re just getting started.

We’re growing and looking for more awesome people to join our merry band of misfits. We are looking for people who share our understanding that when it comes to our commitment to our customers: we mean business. Especially given that the consequences of getting payroll wrong can sometimes be dire.

If you are the kind of person who has always wanted to make a difference and be heard at work, Wagepoint will give you plenty of opportunity to do just that.

The role at high level:

The role is part of a newly built team which focuses on various areas including Governance, Risk and Compliance (GRC). The purpose of this position is to audit what we've done, analyze what we're doing, and advise the organization on best practices to maintain a compliant posture. Responsibilities require leadership and project management experience, good communication skills, having knowledge about information security and business resilience as well as expertise around compliance audits, third party due diligence, risk assessment; awareness and education; and development of policies, standards and guidelines. You will be reporting to the Corporate Risk Manager, and working closely with the Chief Information Officer to assess and identify risks that could impede the reputation, safety, security, and/or financial success of the organization.

What you'll be doing:

Coordinate with multiple teams to ensure compliance of the policies and procedures to the relevant certifications and regulatory requirements
Conduct routine risk assessments and consult with key stakeholders from various business units and positions
- Lead the risk assessment conversations by coordinating with key stakeholder on various controls and treatments to score and mitigate the risks
- Support business areas with day-to-day risk/compliance questions in regard to business processes
Prepare a risk management report of your findings and present them to the Risk Manager and Chief Information Officer.
Consult with various key stakeholders on ad-hoc decisions and changes and provide recommendations to ensure the risk taken is in line with the organization’s risk appetite
Liaise with the Chief Information Officer and Risk Manager to maintain controls and evidence pertaining to the annual SOC audits
Conduct quarterly audits of various controls, processes and procedures and provide recommendations to align with the audit requirements
Liaise with the Privacy Officer on privacy risks, in accordance with relevant legislations in the organization’s countries of operation, and assess current system controls to ensure constant adherence with privacy practices
Evaluating internal operational and procedural compliance.
- Prepare quarterly compliance reports for the organization and present findings to senior and executive management, including the Board of Directors
Support ERM projects and initiatives to drive improvements to key processes and controls

What you bring to the table:

3 - 5 years of information security experience and expertise including information security risk management process, business continuity and compliance management practices.
Experience in audit management activities
Knowledge about third party risk management
Excellent interpersonal, communication, and presentation skills, including formal report writing experience
Understanding of common security standards, legal requirements and regulations related to a SaaS organization (e.g., SOC 2, GDPR, CCPA, PCI DSS, ISO2700x, ISO3001, etc.)
Exceptional communication and presentation skills that will allow you to deliver the risk management strategy to the company
Possess an intimate knowledge of internal business processes and the organization's industry
You possess strategic and creative project management skills and are highly organized and analytical
You work with little to no supervision and keep yourself accountable
A drive to stay current on risk trends by participating in discussions, workshops, courses, etc

Additional Information

This is a one-year contract position to cover an employee on maternity leave. There may or may not be possibility of extension/making the position permanent in the future
The risk analyst will report to the Risk Manager. In the Risk Manager’s absence, they will report to the Chief Information Officer.
The main duties and responsibilities may be subject to change depending on the needs of the organization.

About Wagepoint

Wagepoint is a simple and fast online payroll app, backed by the world's friendliest team.

The app is ideal for small businesses across North America (US & Canada) who are looking to pay their employees easily and quickly.

Wagepoint

New Jobs

Enterprise Risk Analyst (12 Month Contract)