Governance, Risk, and Compliance; GRC Specialist
Listed on 2026-02-27
-
IT/Tech
Cybersecurity
Location:
Fredericton - Knowledge Park, Canada In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.
Fredericton, N.B., (CAN.), Hybrid
Position Summary
At Thales, we are proud to work together to imagine innovative solutions that contribute to building a future that is safer, greener and more inclusive. A future that we can all trust. But these technologies don’t just come from anywhere. At Thales, it all starts with Human Intelligence. That is why our ambition is to create the best possible experience for you.
We strive to create the conditions that enable your growth, to facilitate your work-life balance and daily work, and to broaden your prospects.
In Canada, Thales is relied on to innovate for customers with high-stakes goals, critical missions and big ambitions. Our commitment to mastering digital capabilities in Canada strengthens the nation’s economy – through high-technology jobs, investments in domestic research and technology, and solutions for the aerospace, defense, digital identity and security sectors.
Driven by purpose, values, innovation, and a commitment to building a future we can all trust, Thales Canada seeks to increase digital trust and resilience, offering integrated digital solutions to organizations, mission critical systems and critical infrastructure in both the commercial and the defense community.
Thales has a vacancy for an Intermediate level Governance, Risk, and Compliance (GRC) Specialist to deliver advisory and hands-on execution across CPCSC, CMMC, ISO 2700x, and other compliance frameworks. This role will lead readiness assessments, design and improve control of environments, guide clients through audits/certifications, and translate complex requirements into pragmatic, business-aligned roadmaps. This role is ideal for a consultant who is comfortable working directly with stakeholders, facilitating workshops, and building sustainable GRC solutions built on customer intimacy.
Key Areas of Responsibility
Advisory and Client Engagement
Framework Readiness and Implementation
Conduct gap assessments, control mapping, and remediation planning against the applicable CPCSC requirements (or equivalent regional compliance scheme). Provide guidance on scoping, data flows, and evidence requirements.
Perform NIST SP 800-171/CMMC readiness assessments; develop SSPs and POA&Ms; define enclaves and scoping; establish evidence collection processes; support clients through RPO/RP-led journeys.
Build or mature ISMS programs; conduct risk assessments; develop the Statement of Applicability; support internal audits and management reviews; prepare for external certification.
Control Design, Testing, and Continuous Improvement
Risk Management and Security Governance
Audit and Certification…
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search: