IT GRC Analysts Contractor
About Powerfleet Powerfleet (Nasdaq: AIOT; JSE: PWR) is a global leader in the artificial intelligence of things (AIoT) software-as-a-service (SaaS) mobile asset industry. With more than 30 years of experience, Powerfleet unifies business operations through the ingestion, harmonization, and integration of data—regardless of source—and delivers actionable insights to help companies meet their strategic objectives around Safety, Compliance, Efficiency and Sustainability. Our people-first culture and relentless innovation empower customers to achieve measurable, sustainable business improvements. Powerfleet serves over 2.6 million subscribers across more than 48,000 customers in 120 countries, with commercial operations across every major continent. We are seeking an experienced IT GRC Contractor to provide hands‑on execution support across SOX close‑out activities, external audits, GRC platform administration, security awareness training, privacy operations, and emerging AI governance programs. This role is execution‑focused and delivery‑driven, supporting critical compliance milestones including SOX, SOC 2, ISO 27001, ISO 27701, ISO 42001 (AI Management), and EU AI regulatory readiness. The contractor will work closely with internal teams and external auditors to ensure audit‑ready documentation, timely evidence delivery, and successful program progression. Key Responsibilities: SOX Wrap‑Up & Audit Close‑Out · Support SOX year‑end and quarter‑end close‑out activities, including: o Evidence finalization and quality review o Control testing close‑out coordination o Deficiency and remediation tracking · Respond to auditor follow‑up requests and inquiries · Ensure SOX documentation and evidence are complete, accurate, and audit‑ready SOC 2 Audit Execution · Support SOC 2 audit execution, including: o Evidence coordination and submission o Control documentation maintenance o Tracking and responding to auditor requests · Assist with remediation documentation and management responses, as needed ISO 27001 Program Build‑Out · Assist with ISO 27001 ISMS program development and enhancement, including: o Supporting policy, procedure, and control documentation o Aligning controls and evidence to ISO requirements o Preparing materials for readiness or certification activities · Support internal stakeholders operationalizing ISO 27001 requirements ISO 27701 & Data Privacy Program Support · Support ISO 27701 (Privacy Information Management System) build‑out, including: o Documentation of privacy controls, roles, and responsibilities o Mapping privacy requirements to existing ISO 27001 controls where applicable o Supporting evidence collection and audit readiness · Assist with broader data privacy compliance efforts, including: o Maintaining privacy documentation and evidence o Supporting privacy risk assessments and compliance tracking EU AI & ISO 42001 Program Support · Support EU AI regulatory readiness and AI governance initiatives, including: o Assisting with AI use case inventory and documentation o Supporting AI risk assessments and governance workflows o Aligning organizational practices to ISO 42001 (AI Management System) requirements · Assist with development of AI policies, procedures, and compliance artifacts GRC Platform Administration (Hyperproof) · Provide hands‑on administration of Hyperproof, including: o Managing evidence requests and workflows o Maintaining control, framework, and evidence mappings o Supporting auditor portals and compliance dashboards · Ensure data quality and consistency across programs and framework Security Awareness Training (KnowBe4) · Support management of the KnowBe4 security awareness training program, including: o Campaign execution and tracking o Completion monitoring and reporting o Supporting audit and compliance evidence needs Privacy Operations – Inbox Management · Monitor and manage the privacy inbox, including: · Assist in intake, triage, and tracking of privacy‑related requests · Oversee coordination with Legal, Security, and IT stakeholders · Ensuring timely and documented responses Qualifications & Skills: · 3–5 years of experience in GRC, IT risk, compliance, or audit operations · Hands‑on experience supporting SOX and SOC 2 audits · Working knowledge of ISO 27001 (program build‑out or readiness preferred) · Experience supporting data privacy frameworks and programs (ISO 27701 preferred) · Exposure to AI governance or emerging AI regulatory requirements (ISO 42001 or EU AI familiarity a plus) · Experience with GRC platforms (Hyperproof strongly preferred) · Familiarity with security awareness platforms (KnowBe4 preferred) · Strong documentation, organizational, and stakeholder communication skills Level of Experience: · Prior contractor or consulting experience in GRC or audit environments · Ability to operate independently with minimal onboarding · Experience supporting multiple concurrent compliance initiatives · Strong written communication skills for auditor and regulator interaction The salary for this 6-month contract position is approximately CAD $16,600 per month. Actual compensation will be based on experience, skills, and qualifications. Equal Employment Opportunity Statement Powerfleet is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other protected status under applicable law. We believe that diverse perspectives drive innovation and success, and we’re proud to be a workplace that reflects the communities we serve.