Job description
Shape the future of GRC engineering at Coveo
As a Technical GRC Analyst on our Security team, you’ll play a pivotal role in reducing risk across the company, with a strong focus on the Coveo Platform, our AI-powered B2B solution. This is your opportunity to transform how security, risk, and compliance are embedded into our cloud-based infrastructure.
Your mission? Bridge the gap between governance and engineering with practical, impactful insights and solutions.
Here’s what makes this opportunity exciting:
The Coveo Platform is trusted by global enterprises to deliver personalized search and AI powered recommendations at scale. As part of the Security team, you’ll play a key role in safeguarding this powerful platform by designing innovative ways to automate compliance and integrate security best practices into our engineering processes.
If you’re passionate about transforming GRC processes into streamlined, developer-friendly solutions, this is your chance to make a real impact!
Here’s what you’ll be responsible for:
- Automating compliance workflows to streamline GRC operations.
- Enhancing reporting and data visualization to provide stakeholders with clear, actionable insights.
- Expanding our GRC platform to integrate data from our security tools.
- Advocating for security best practices and demonstrating how GRC efforts drive business value.
- Collaborating with engineering teams to interpret security requirements and embed them into systems or products.
- Developing tools that seamlessly integrate GRC controls into engineering workflows.
Here’s what will qualify you for the role:
- About 5 years of related professional experience with 1-2 years of specific development experience (ideally in security) and hands-on expertise in automation, scripting (Python preferred), and APIs.
- Experience with cloud infrastructure (AWS preferred) and governance frameworks (SOC2, HIPAA, ISO27001), with the ability to create clear, data-driven insights using visualization tools like PowerBI or Sigma.
- Strong problem-solving and communication skills, with the ability to work in ambiguity, drive solutions, and explain complex security concepts clearly to both technical and non-technical audiences.
Here’s what will make you stand out from the crowd:
- You believe in the importance of in-person interactions and are excited to work in a flexible hybrid work environment, 2 days a week, in our Montreal or Quebec City offices.
- You are bilingual (English/French) and can support stakeholders across the organization’s international offices.
- You have experience with Terraform, Kubernetes, or other infrastructure-as-code tools.
Do you think you can bring this role to life?
You don’t need to check every single box; passion goes a long way and we appreciate that skillsets are transferable.
Send us your application, we want to get to know you! Join the Coveolife!
We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background. We know that applying for a new role is a lot of work and we really appreciate your time.
#li-hybrid
