Governance, Risk, and Compliance (GRC) Lead
WELLSTARCanada
Posted October 15, 2025
Full Time
About the Company
Well is a health technology company that offers personalized health advancement through an AI-driven platform. It provides on-demand health concierge services and daily rewards to help members achieve their health goals. Distinctive for its human touch and advanced suggestions, Well aims to improve employee health and engagement for employers while making health navigation more accessible and personalized.
Job Description
WELLSTAR is seeking a highly motivated Governance, Risk, and Compliance (GRC) Lead to own and drive their GRC efforts. This role will report to the Business Information Security Officer, focusing on ISO 27001 and SOC 2 Type 2 compliance. The role involves defining the function, shaping the roadmap, and growing a team while collaborating with internal stakeholders. The position is remote-friendly and targeted towards candidates based in Canada.
Requirements
- 8+ years experience in GRC, compliance, risk management, or IT audit
- Deep familiarity with governance and compliance frameworks
- Experience implementing ISO 27001 and SOC 2 Type 2 programs
- Strong skills in governance, compliance, risk management and risk assessment
- Collaboration with senior stakeholders
- Strong written and verbal communication skills
- Detail-oriented approach and proactive mindset
Benefits
- Impact and exposure
- Growth and ownership
- Mission and purpose
- Career development
