IT GRC Analysts Contractor
Join a high-impact IT GRC team driving ISO 27001, SOC 2, SOX, privacy, and AI governance initiatives while gaining exposure to enterprise-wide compliance programs.
About Powerfleet
Powerfleet (Nasdaq: AIOT; JSE: PWR) is a global leader in the artificial intelligence of things (AIoT) software-as-a-service (SaaS) mobile asset industry. With more than 30 years of experience, Powerfleet unifies business operations through the ingestion, harmonization, and integration of data—regardless of source—and delivers actionable insights to help companies meet their strategic objectives around Safety, Compliance, Efficiency and Sustainability. Our people-first culture and relentless innovation empower customers to achieve measurable, sustainable business improvements. Powerfleet serves over 2.6 million subscribers across more than 48,000 customers in 120 countries, with commercial operations across every major continent.
We are seeking an experienced IT GRC Contractor to provide hands‑on execution support across SOX close‑out activities, external audits, GRC platform administration, security awareness training, privacy operations, and emerging AI governance programs. This role is execution‑focused and delivery‑driven, supporting critical compliance milestones including SOX, SOC 2, ISO 27001, ISO 27701, ISO 42001 (AI Management), and EU AI regulatory readiness. The contractor will work closely with internal teams and external auditors to ensure audit‑ready documentation, timely evidence delivery, and successful program progression.
Key Responsibilities:
SOX Wrap‑Up & Audit Close‑Out
· Support SOX year‑end and quarter‑end close‑out activities, including:
o Evidence finalization and quality review
o Control testing close‑out coordination
o Deficiency and remediation tracking
· Respond to auditor follow‑up requests and inquiries
· Ensure SOX documentation and evidence are complete, accurate, and audit‑ready
SOC 2 Audit Execution
· Support SOC 2 audit execution, including:
o Evidence coordination and submission
o Control documentation maintenance
o Tracking and responding to auditor requests
· Assist with remediation documentation and management responses, as needed
ISO 27001 Program Build‑Out
· Assist with ISO 27001 ISMS program development and enhancement, including:
o Supporting policy, procedure, and control documentation
o Aligning controls and evidence to ISO requirements
o Preparing materials for readiness or certification activities
· Support internal stakeholders operationalizing ISO 27001 requirements
ISO 27701 & Data Privacy Program Support
· Support ISO 27701 (Privacy Information Management System) build‑out, including:
o Documentation of privacy controls, roles, and responsibilities
o Mapping privacy requirements to existing ISO 27001 controls where applicable
o Supporting evidence collection and audit readiness
· Assist with broader data privacy compliance efforts, including:
o Maintaining privacy documentation and evidence
o Supporting privacy risk assessments and compliance tracking
EU AI & ISO 42001 Program Support
· Support EU AI regulatory readiness and AI governance initiatives, including:
o Assisting with AI use case inventory and documentation
o Supporting AI risk assessments and governance workflows
o Aligning organizational practices to ISO 42001 (AI Management System) requirements
· Assist with development of AI policies, procedures, and compliance artifacts
GRC Platform Administration (Hyperproof)
· Provide hands‑on administration of Hyperproof, including:
o Managing evidence requests and workflows
o Maintaining control, framework, and evidence mappings
o Supporting auditor portals and compliance dashboards
· Ensure data quality and consistency across programs and framework
Security Awareness Training (KnowBe4)
· Support management of the KnowBe4 security awareness training program, including:
o Campaign execution and tracking
o Completion monitoring and reporting
o Supporting audit and compliance evidence needs
Privacy Operations – Inbox Management
· Monitor and manage the privacy inbox, including:
· Assist in intake, triage, and tracking of privacy‑related requests
· Oversee coordination with Legal, Security, and IT stakeholders
· Ensuring timely and documented responses
Qualifications & Skills:
· 3–5 years of experience in GRC, IT risk, compliance, or audit operations
· Hands‑on experience supporting SOX and SOC 2 audits
· Working knowledge of ISO 27001 (program build‑out or readiness preferred)
· Experience supporting data privacy frameworks and programs (ISO 27701 preferred)
· Exposure to AI governance or emerging AI regulatory requirements (ISO 42001 or EU AI familiarity a plus)
· Experience with GRC platforms (Hyperproof strongly preferred)
· Familiarity with security awareness platforms (KnowBe4 preferred)
· Strong documentation, organizational, and stakeholder communication skills
Level of Experience:
· Prior contractor or consulting experience in GRC or audit environments
· Ability to operate independently with minimal onboarding
· Experience supporting multiple concurrent compliance initiatives
· Strong written communication skills for auditor and regulator interaction
The salary for this 6-month contract position is approximately CAD $16,600 per month. Actual compensation will be based on experience, skills, and qualifications.
Equal Employment Opportunity Statement
Powerfleet is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other protected status under applicable law. We believe that diverse perspectives drive innovation and success, and we’re proud to be a workplace that reflects the communities we serve.
- Department
- IT
- Locations
- Toronto
- Remote status
- Fully Remote
- Employment type
- Contract
Toronto
About Powerfleet
Powerfleet (Nasdaq: AIOT; JSE: PWR) is a global leader in AIoT (Artificial Intelligence of Things) and SaaS-based mobile asset management. With over 30 years of expertise, we empower organizations worldwide to unify operations by ingesting, harmonizing, and integrating data from any source—transforming it into actionable insights that save lives, time, and money.
Our end-to-end solutions help businesses monitor, manage, and optimize everything from warehouse assets to connected vehicles, driving safety, efficiency, and sustainability across the supply chain. But we are more than just a technology company—our people-centric approach fosters innovation and long-term success for our customers.
Powerfleet serves over 2.6 million subscribers across 48,000 customers in 120 countries, with commercial operations spanning every major continent. Join us as we shape the future of intelligent mobility and business transformation.
Equal Employment Opportunity Statement
Powerfleet is committed to maintaining a diverse, equitable, and inclusive workplace where all individuals are treated with dignity and respect. Employment decisions are based on qualifications, merit, and business needs. We do not discriminate or tolerate harassment on any protected basis under applicable laws in the countries where we operate, including characteristics such as race, ethnicity, nationality, religion, gender, gender identity or expression, sexual orientation, disability, or age.