Who you are

• You are someone that has experience in either technology or payments infrastructure. Both are preferred, but candidates are encouraged to apply if you have only one and interested in learning about the other
• For technology, you are well versed in disaster recovery, networking, data, CICD pipelines, change management, ITSM principles (incident, problem, and change management), configuration management, KPI and KRIs
• For payments, you have a deep understanding of card and bank transaction lifecycles, financial reconciliation and authorization/settlement processes in modern API-based systems
• You are a self starter, determined, and have agency to be willing to learn new domains and systems that you are not familiar with
• Bachelor’s degree in computer science, technology management, commerce or related technical or management field
• You have excellent communication skills – this is required in order to ensure that you can communicate what the risk posture of the organization is relative to your analysis of vulnerabilities and risk
• You are familiar with OSFI B-10, B-13, and RPAA
• Familiarity with AWS Inspector, CloudTrail, Config, SCPs, and other AWS native technologies (EKS, RDS, DB, network firewall), Terraform, and Argo CD
• Experience leading audits and working with regulators
• Experience in building your own automations and scripts in order to pull data to automate evidence retrieval
• You have the ability to work cross functionally. This is a role where soft skills are important in order to ensure partnerships within and outside KOHO, to communicate the risk back to the organization in a clear and concise manner
• Preferred: Familiar with OSFI guidelines (B-10 and B-13) and RPAA (Retail Payment Activities Act)

What the job involves

• We’re looking for a Senior Governance, Risk and Compliance (GRC) Analyst - Platform Technology and Payments to join our team for a role to work remotely based in Canada
• Reporting to our Senior Manager, Product Security, you’re going to be a part of a team that is low-ego, high-agency which values innovation, continuous learning, and high-quality work
• Building up and establishing a compliance program for the KOHO technology team. Compliance standards that you need to be familiar with include RPAA, OSFI B-10, and OSFI B-13. The successful candidate will be responsible for obtaining and preparing evidence packages for submission to auditors while also building a sustainable, systematic, and automated compliance program
• Working with the technology team to build KRI’s that align with the relevant compliance obligations
• Translate complex technical and regulatory information into clear, concise, and user-friendly documentation, including policies, SOPs, control descriptions, and network diagrams
• Prepare and coordinate the review and approval of evidence packages and submission-ready documents for external audits and regulatory examinations
• Work collaboratively with engineering, product, and operations teams to embed compliance requirements into the software development lifecycle (SDLC) and ensure payments and technology changes are documented accurately
• Advising leadership on risk management strategies, including risk mitigation, risk reduction, compensating controls, and residual risk analysis
• Supporting tech compliance requirements as it relates to payments and technology infrastructure. The main regulations, guidelines, and standards include OSFI B-13 and B-10, RPAA, and PCI

Benefits

• Stock options
• Semi-annual merit increases
• Holiday bonus
• Work from anywhere
• Generous PTO
• Health & Lifestyle spending accounts
• $1000 remote office setup budget
• $5000 referral bonus
• Free KOHO Premium account
• Icon Potential Alt Text
• In-house coaching program
• $2000 annual training allowance
• Approachable leadership
• Bias towards action