High-Level Overview

Benevity is seeking a Governance, Risk & Compliance (GRC) Analyst to support and grow our security governance, risk, privacy, and regulatory program. In this role, you will contribute to the execution of Benevity’s GRC program by supporting compliance activities, assisting with risk assessments, contributing to third-party risk management, responding to client due diligence requests, and helping maintain the policies and controls that strengthen trust with our clients, partners, and stakeholders.

Working alongside experienced GRC professionals, you will build your skills in information security, compliance, and risk management while helping ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements. This is a hands-on role with significant learning and growth opportunities across governance, risk, audit, and privacy domains.

What you'll do:

Governance & Policy

• Assist in maintaining and rolling out security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
• Support policy exception management, attestation processes, and identify opportunities for process improvement.

Risk Management

• Assist with enterprise risk assessments, including vendor and process-level reviews.
• Support maintenance of the risk register, track remediation activities, and assist with risk treatment planning.
• Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.

Compliance & Audit

• Support audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
• Assist with evidence gathering, control validation, and auditor engagement.
• Leverage GRC platforms to support audit, privacy, and compliance workflows.

Client Support & Sales Enablement

• Support the sales process by responding to client inquiries related to security, privacy, and compliance.
• Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
• Partner with sales and client success teams to provide timely, accurate responses that build client trust.

Privacy and Regulatory

• Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
• Collaborate with legal and data governance teams to help ensure compliance with data protection and financial crime regulations.
• Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
• Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory & Awareness

• Partner with business and technical teams to support the embedding of risk and compliance into projects and initiatives.
• Assist in delivering reporting and insights (dashboards, risk metrics, summaries) for leadership.
• Contribute to Benevity’s Security Awareness & Training program, including awareness campaigns, training modules, and phishing simulations.
• Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.

What you'll bring:

• 2–4 years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or technology-driven environment. (For a Junior GRC Analyst, we welcome candidates with 0–2 years of experience, including relevant internship, co-op, or academic project experience.)
• Working knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and/or CCPA/CPRA.
• Exposure to or experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to support policy, risk, audit, privacy, and vendor risk workflows.
• Familiarity with risk assessment methodologies, vendor risk concepts, and compliance evidence gathering.
• Experience or willingness to support client due diligence processes (security questionnaires, RFPs, TPRM).
• Ability to communicate risk, security, privacy, and regulatory concepts clearly to both technical and non-technical stakeholders.
• Strong organizational skills, attention to detail, and a proactive approach to learning and problem-solving.
• An interest in leveraging automation and AI to streamline GRC processes and enhance efficiency is a plus.
• Certifications such as Security+, CISM, CISA, CRISC, or CIPM/CIPP are valued; candidates actively pursuing certification are encouraged to apply.

High-Level Overview

Benevity is seeking a Senior Governance, Risk & Compliance (GRC) Analyst to elevate our security governance, risk, privacy, and regulatory posture. In this senior role, you will drive the execution, innovation, and continuous improvement of Benevity’s GRC program. You will lead compliance activities, conduct risk assessments, contribute to third-party risk management, respond to client due diligence requests, support FINTRAC/AML obligations, and influence policies and controls that strengthen trust with our clients, partners, and stakeholders.

As a trusted advisor across teams, you will help ensure Benevity aligns with leading standards, privacy laws, and regulatory requirements while fostering a culture of security, compliance, and accountability. You’ll also mentor junior members of the team, helping to grow Benevity’s next generation of security and compliance professionals, with a focus on developing proactive and innovative approaches to GRC challenges.

What you'll do:

Governance & Policy

• Contribute to the development, maintenance, and rollout of security and privacy policies, standards, and control frameworks aligned to ISO 27001, SOC 2, NIST, PCI DSS, GDPR, PIPEDA, FINTRAC, and other global regulations.
• Support policy approval, exception management, and attestation processes, actively seeking opportunities for process improvement and automation
  
  

Risk Management

• Lead and execute enterprise-wide risk assessments, including vendor and process-level reviews.
• Maintain and improve the risk register, track remediation activities, and support risk treatment planning.
• Contribute to Benevity’s Third-Party Risk Management (TPRM) program, including vendor onboarding assessments, ongoing monitoring, and remediation tracking.
  
  

Compliance & Audit

• Lead audit readiness and response efforts for ISO 27001, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and other frameworks.
• Coordinate evidence gathering, control validation, and auditor engagement.
• Leverage GRC platforms to streamline audit, privacy, and compliance workflows.

Client Support & Sales Enablement

• Support the sales process by responding to client inquiries related to security, privacy, and compliance.
• Complete customer security questionnaires, RFPs, and third-party risk management (TPRM) requests.
• Partner with sales and client success teams to provide timely, accurate responses that build client trust.
  
  

Privacy and Regulatory

• Support privacy-related initiatives across jurisdictions (GDPR, PIPEDA, CCPA/CPRA, and others).
• Collaborate with legal and data governance teams to ensure compliance with data protection and financial crime regulations.
• Assist with FINTRAC-related compliance requirements, including reporting and risk assessments related to AML/ATF obligations.
• Monitor regulatory changes (privacy, AML, financial crime) and help align internal processes accordingly.

Advisory, Awareness & Mentorship

• Partner with business and technical teams to embed risk and compliance into projects and initiatives.
• Deliver reporting and insights (dashboards, risk metrics, executive summaries) for leadership.
• Lead Benevity’s Security Awareness & Training program, including the design, delivery, and continuous improvement of awareness campaigns, training modules, and phishing simulations.
• Contribute to training, documentation, and awareness activities that strengthen Benevity’s security, privacy, and compliance culture.
• Mentor and coach junior team members, providing guidance, feedback, and knowledge sharing to support their growth and development.

What you'll bring:

• 5+ years of experience in cybersecurity, governance, risk, compliance, or privacy, ideally in a SaaS or high-growth environment.
• Strong knowledge of security, privacy, and regulatory frameworks including ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA, FINTRAC, and CCPA/CPRA.
• Hands-on experience with GRC tooling (e.g., OneTrust, Hyperproof, SecurityPal, AuditBoard, Drata) to manage policies, risks, audits, privacy, and vendor risk workflows.
• Proven success in conducting risk assessments, managing vendor risk/TPRM, maintaining risk registers, and driving remediation.
• Experience supporting client due diligence processes (security questionnaires, RFPs, TPRM).
• Ability to clearly communicate risk, security, privacy, and regulatory concepts to both technical and non-technical stakeholders.
• Strong organizational and project management skills with experience leading cross-functional initiatives.
• A demonstrated interest and track record in leveraging automation and AI to streamline GRC processes and enhance efficiency.
• Certifications such as CISM, CRISC, CISSP, CISA, or CIPM/CIPP are highly valued.

High Level Role Overview

Benevity is looking for a Principal Information Security Analyst to join our Security Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management.

This role is ideal for someone with deep hands-on experience in security operations who is also energized by the opportunity to work alongside AI. We are actively integrating AI tools into our SecOps practice to accelerate triage, investigation, detection engineering, and analyst productivity, and this role will play a meaningful part in shaping how we do that. You should be comfortable navigating AI tools, building your own skills with them, identifying practical use cases, and partnering with the team to put them into production.

You will serve as both a senior escalation point and a coach, helping elevate the team's ability to respond to threats in a cloud-native environment while modernizing how the work gets done.

What you'll do:

• Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, SIEM, and cloud-native platforms
• Lead and coordinate security incident response across the full lifecycle, from detection and containment through eradication, recovery, and lessons learned, serving as incident commander for significant events
• Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
• Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
• Identify, evaluate, and operationalize AI-assisted approaches to SecOps work, including AI-augmented triage, investigation, summarization, detection engineering, and reporting
• Build your own fluency with AI tooling and help the broader team develop the same skills, sharing patterns that work and being honest about ones that don't
• Apply a healthy degree of skepticism to AI outputs, validating findings and helping the team understand where AI assists the work and where human judgment still owns the decision
• Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
• Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
• Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
• Partner with our Senior Fraud Analyst on cross-functional investigations where fraud and cyber threats intersect, contributing SecOps expertise without owning the fraud function day-to-day
• Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
• Support the development, tracking, and reporting of KPIs and metrics to measure and improve team performance
• Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
• Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

What you'll bring:

• 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
• Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, SIEM, and cloud-native logging platforms
• Familiarity with MDR service models and hands-on experience validating escalated alerts
• Hands-on experience leading security incident response, including acting as incident commander, coordinating cross-functional responders, managing communications, and producing post-incident artifacts
• Practical experience using AI tools in a security or technical context, with a clear point of view on where they add value, where they fall short, and how to get them production-ready
• Curiosity and willingness to keep building AI skills as the tooling evolves, and an interest in helping teammates do the same
• Awareness of the security considerations that come with using AI tools in a SecOps environment (data handling, prompt hygiene, output validation)
• Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
• Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
• Experience developing or refining operational playbooks, triage guides, and incident workflows
• Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
• Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
• A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
• Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
• Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
• A passion for teaching and mentoring others, helping team members grow their skills and confidence
• Preferred certifications include GCIH, GCFA, OSCP, or CISSP

High-Level Overview

We are looking for a GTM Operations Analyst, Principal to serve as the strategic backbone of Benevity's go-to-market planning and performance infrastructure. In this senior individual contributor role, you will own our Annual GTM Planning Cycle, lead TAM/SAM analysis and territory design, and build the analytical foundation that enables confident capacity planning and data-driven board reporting. Working in close partnership with GTM Operations, Revenue Operations, Sales Leadership, Marketing, Product Marketing, Product, and Finance, you will ensure iron-clad business metric accuracy and act as the connective tissue between strategic vision and data-backed execution. The ideal candidate is a seasoned operator with deep analytical expertise, executive presence, and a proven track record of driving transformational GTM programs in a SaaS environment.

What you’ll do:

• Annual Planning Cycle Ownership: Own and lead the full Annual GTM Planning Cycle, including but not limited to bookings and pipeline capacity modeling  in close partnership with GTM Operations, Revenue Operations, and Sales Leadership, ensuring plans are grounded in data, aligned to business objectives, and built for execution.
• Total Addressable Market Analysis: Partner with Marketing, Product Marketing, Product, Finance, and Revenue Operations on Prospect and Client Total Addressable Market (TAM) and Serviceable Addressable Market (SAM) analysis to build confidence in capacity plans and inform territory design decisions.
• Territory Design: Partner with GTM Operations and Sales Leadership on territory design in accordance with TAM/SAM analysis and the capacity model, ensuring equitable, data-driven distribution of accounts and opportunities to maximize revenue potential.
• Business Metric Governance: Act as the primary liaison with Revenue Operations and Finance to ensure iron-clad accuracy of all core business metrics — including bookings, ARR, pipeline, and renewal/upsell performance — serving as the ultimate arbiter of data integrity across the GTM organization.
• GTM Capacity Plan Measurement & Board Reporting: Provide the analytical foundation for GTM Capacity Plan measurement and lead the development and automation of monthly board update materials (slide deck), translating complex operational data into clear, compelling, executive-ready narratives.
• Strategic Cross-Functional Leadership: Act as a senior thought partner to GTM and Sales Leadership, proactively identifying risks and opportunities in the business and providing data-driven recommendations that inform strategic decisions.

What you’ll bring:

• 10+ years of experience in GTM, Revenue, or Sales Operations, with demonstrated experience in annual planning, capacity modeling, and territory design in a SaaS environment.
• Technical Proficiency: Advanced knowledge of Salesforce CRM and Excel/Google Sheets required. Experience with ZoomInfo, LeanData, Cloudingo, and Clay is highly valued. Proficiency in data visualization and BI tools is a strong plus.
• Planning & Modeling Expertise: Demonstrated experience building and managing bookings/pipeline capacity models and territory design frameworks in close partnership with Finance and Sales leadership.
• Strategic & Analytical Excellence: Ability to synthesize complex, multi-dimensional data sets into clear strategic recommendations for senior executive and board-level audiences.
• AI-Forward Mindset: Genuinely curious about and enthusiastic for the ways AI tools and automation can accelerate GTM operations, from surfacing insights faster and streamlining data workflows to drafting communications and optimizing processes at scale. You see AI as a force multiplier, not a threat, adapt quickly to new technologies as they emerge, and proactively seek ways to embed AI-driven efficiencies into your day-to-day work.
• Cross-Functional Influence: Proven track record of driving alignment and accountability across Sales, Marketing, Finance, Product, and Revenue Operations at the leadership level.
• Executive Presence: Exceptional written and verbal communication skills with the ability to present to and influence C-Suite stakeholders.
• Detail Oriented: Demonstrated aptitude to ensure data accuracy and integrity at scale, managing complex, interconnected business metrics with precision.
• Agility: Ability to manage multiple high-priority workstreams simultaneously in a fast-paced, high-growth SaaS environment without sacrificing quality or detail.

High-Level Overview

We are looking for a GTM Operations Analyst, Lead to own and optimize end-to-end go-to-market operations across the full revenue lifecycle, from Marketing through Closed Won to Renewal and Upsell. In this role, you will partner with cross-functional leaders across Sales, Marketing, Finance, and Revenue Operations to drive process optimization inclusive of systems integration and usage across our sales tech stack (Salesforce CRM, HubSpot, Gong, ZoomInfo, LeanData, and Clay), delivering data analysis and reporting that drives both C-Suite visibility and individual seller productivity. The ideal candidate is a strategic self-starter with deep analytical capabilities, strong cross-functional instincts, and a high orientation toward process efficiency and data accuracy.

What you’ll do:

• Full Funnel GTM Operations: Own and optimize end-to-end GTM operations across the full revenue lifecycle (from Marketing through Closed Won to Renewal and Upsell) ensuring seamless handoffs, consistent data quality, and clear accountability at each stage of the funnel.
• Cross-Functional Partnership: Partner with cross-functional leaders across Sales, Marketing, Customer Success, Finance, and Revenue Operations on process optimization, inclusive of systems integration and usage across our sales tech stack (Salesforce CRM, HubSpot, Gong, ZoomInfo, LeanData, and Clay), to drive both C-Suite visibility and individual seller productivity.
• Bookings Audit & Financial Reporting: Own and continuously optimize the monthly bookings audit in close partnership with your Revenue Operations counterpart, ensuring booking accuracy, data integrity, and timely monthly financial reporting to support executive and board-level decision-making.
• Pipeline Reviews & Bookings: Prepare for and participate in weekly Pipeline Reviews and Sales Booking Forecast meetings, delivering actionable insights that help sales leadership make informed decisions on pipeline health and deal progression.
• Executive Communications: Prepare executive communications updating the leadership team on forecast, bookings, and pipeline progress — synthesizing complex data into clear, concise, and compelling narratives.
• GTM Metric Mastery: Develop and maintain an intimate understanding of Benevity's booking calculation fields and GTM reporting metrics (including New Logo, Renewals, and Upsell/Cross-sell) and serve as a trusted subject matter expert for the broader organization.
• Process Design & Enablement: Document and provide enablement to stakeholders on GTM Operations processes, ensuring consistent adoption and understanding across the go-to-market organization.
• Performance Analytics: Deliver robust dashboards and analysis support for sales and pipeline performance using Salesforce CRM and HubSpot, generating actionable insights that drive individual seller productivity and leadership visibility.

What you’ll bring:

• 7+ years of experience in GTM, Revenue, or Sales Operations with hands-on expertise across the full revenue funnel in a SaaS or technology environment.
• Technical Proficiency: Advanced knowledge of Salesforce CRM and HubSpot is required. Experience with ZoomInfo, LeanData, Cloudingo, and Clay is highly valued.
• Analytical Excellence: Strong ability to work with complex data sets, build reports and dashboards, and translate findings into executive-ready narratives that drive action.
• AI-Forward Mindset: Genuinely curious about and enthusiastic for the ways AI tools and automation can accelerate GTM operations, from surfacing insights faster and streamlining data workflows to drafting communications and optimizing processes at scale. You see AI as a force multiplier, not a threat, adapt quickly to new technologies as they emerge, and proactively seek ways to embed AI-driven efficiencies into your day-to-day work.
• Cross-Functional Collaboration: Demonstrated experience partnering with Sales, Marketing, Finance, and Revenue Operations leadership to drive process alignment, system adoption, and accountability.
• Detail Oriented: Exceptional aptitude to clearly document requirements, processes, and business metrics, and manage assigned tasks with precision and accuracy.
• Communication Skills: Ability to distill complex operational data into clear, compelling communications for senior stakeholders and C-Suite audiences.
• Agility: Demonstrated ability to handle competing priorities in a fast-paced, high-growth environment with a strong orientation toward execution and continuous improvement.

High-Level Overview

As the Manager, Business Applications at Benevity, you will oversee the integration and efficiency of our business applications and systems. Your role is pivotal in ensuring that our technology solutions align with operational goals and strategies, driving productivity, streamlining processes, and facilitating data-driven decision-making. You will lead a team responsible for the analysis, implementation, and improvement of business systems, ensuring they support Benevity's mission to empower companies and their employees to make a positive impact.

You will also be responsible for managing cross-functional steering committees, developing system roadmaps, and overseeing backlog management. Additionally, this role will involve leveraging business intelligence to support strategic initiatives, developing and refining operational processes, and establishing key metrics and reporting frameworks to measure success and drive continuous improvement.

What you'll do:

• System Management & Maintenance: Oversee the implementation, configuration, and optimization of business systems to ensure alignment with organizational objectives, while leading the back-office systems team responsible for ongoing support.
• Project & Roadmap Management: Lead system-related projects (upgrades, migrations, new implementations), develop and maintain system roadmaps, and manage backlogs, ensuring initiatives align with business priorities and strategic goals.
• Process Improvement & Automation: Develop, refine, and manage operational processes to improve efficiency, recommend automation, and enhance workflows for better business outcomes.
• Business Intelligence & Data Management: Utilize BI tools to analyze data, generate insights, establish KPIs, ensure data integrity, and develop reporting frameworks to support strategic decision-making.
• Cross-Functional Collaboration & Governance: Lead cross-functional steering committees, ensuring business systems align with organizational priorities, collaborating with GTM, Finance, Client Success, Engineering, Technology Operations, and Data Governance.
• User Support & Training: Provide technical support, develop training programs, and drive system adoption to enhance proficiency across the organization.
• Compliance & Security: Ensure business systems comply with industry regulations and security policies, conducting audits, risk assessments, and proactive data protection initiatives.
• Team Leadership & Development: Oversee team performance, provide mentorship, and support professional growth while staying informed on industry trends and emerging technologies.
• Strategic Planning & Innovation: Drive strategic planning for system and integration enhancements, develop an integration strategy and roadmap, and maintain business system integrations through Workato to ensure seamless data flow.

What you'll bring:

• Bachelor's degree in Business, Computer Science, Information Systems, or a related field.
• Proven experience with system integration, project management, and process improvement.
• Strong understanding of business intelligence, data management, compliance, and security standards.
• Experience managing cross-functional committees and aligning business systems with organizational strategy.
• Excellent leadership, communication, and interpersonal skills.
• Ability to align technology solutions with business objectives and Benevity's mission.
  
  

  Operations - Ashley Tedham:

  "After 10+ years working in the non-profit space, I started looking for a meaningful challenge, one that continued to allow me to serve the broader community, while learning a different set of skills. I was introduced to a few people at Benevity and after several months of exploring different opportunities I was approached by Caleb Wall, who invited me to join the Global Team at Benevity. What a journey it has been! In just 2.5 years I grew from a Senior Analyst, to Acting Manager, to Manager to Director of the Global Team. The challenging opportunities that Benevity provided along with the mentorship and support of my colleagues and people leaders allowed me to grow into my dream job, helping me to expand my skill-set and level-up my impact! It hasn't been easy - but it's become the most fulfilling position I have ever had." 

  Ashley Tedham, Director, Global Operations & Foundation Partnerships