We are Systematix and we are currently seeking a Junior Governance, Risk & Compliance (GRC) Analyst for our client, a major provincial energy utility organization, to support enterprise security governance and cybersecurity compliance initiatives within a regulated, utility environment. This role is 100% onsite in Regina, Saskatchewan – mandatory!.

ABOUT THE PROJECT

Systematix is supporting a major Canadian energy utility organization in strengthening its Enterprise Security governance, risk management, and compliance capabilities.

The Junior GRC Analyst will support the Enterprise Security team by assisting with the development and maintenance of governance frameworks, conducting risk assessments, supporting cybersecurity compliance initiatives, and helping implement security awareness and risk management processes across the organization.

This role requires a strong foundation in cybersecurity governance, risk management, compliance practices, and enterprise security operations, along with the ability to collaborate across security, IT, and operational teams.

ABOUT THE RESPONSIBILITIES

• Support development and maintenance of cybersecurity governance frameworks and documentation
• Assist with security risk assessments and risk management activities
• Conduct third-party security risk assessments and vendor security reviews
• Assist in performing security compliance reviews and monitoring remediation activities
• Develop and maintain security policies, standards, procedures, and documentation
• Support internal and external security audits, including evidence gathering and reporting
• Document and track enterprise security risks and risk exceptions
• Assist in monitoring change management compliance across systems and processes
• Support development and delivery of cybersecurity awareness and training programs
• Participate in threat and risk assessments to identify and mitigate vulnerabilities
• Collaborate with enterprise security, IT, and operational teams to strengthen security posture
• Maintain documentation related to governance processes, security procedures, and risk registers

REQUIREMENTS – Must-have

• Minimum 3+ years of experience in cybersecurity governance, risk, and compliance (GRC)
• Minimum 3+ years working as part of a cybersecurity or security operations team
• Experience supporting business continuity planning and disaster recovery initiatives
• Experience developing security policies, standards, and procedures
• Experience supporting security audits, regulatory monitoring, and compliance activities
• Experience conducting security risk assessments and risk analysis activities
• Experience supporting security awareness and training programs
• Strong understanding of security governance frameworks and cybersecurity best practices
• Strong documentation, analytical, and communication skills
• Ability to work full-time onsite in Regina, Saskatchewan

Nice-to-have

• Experience working in Industrial Control Systems (ICS) or SCADA environments
• Experience in energy, utilities, or other critical infrastructure sectors
• Experience supporting third-party security risk assessments
• Experience working with GRC platforms or risk management tools
• North American enterprise cybersecurity experience
• Professional certifications such as CISSP, CISM, CISA, ABCP, or MBCP

ABOUT THE ROLE

Location: Onsite – Regina, Saskatchewan

Work Schedule: Monday to Friday, 8:00 AM – 5:00 PM CST

Planned Start Date: April 2026 (anticipated award)

Initial End Date: March 31, 2027

Extension Options: Up to four additional one-year renewal terms

PAY DISCLOSURE

Junior / Intermediate (3–5 years): $65–85/hr

Intermediate (6–9 years): $85–105/hr

Compensation is commensurate with experience, skills, and market conditions.

AI DISCLOSURE

Systematix may use artificial intelligence (AI) or other automated tools to support parts of the recruitment process. No automated tools make hiring decisions.

ABOUT SYSTEMATIX

Systematix is one of Canada’s largest privately owned national consulting and resourcing firms, providing consulting and staffing services across public and private sectors.

Systematix. Results Focused. People Driven.