Director, Governance, Risk & Compliance (GRC)

Robertson & Company Ltd.; Toronto; Hybrid; CAD 170,000 - 190,000; Full time

Job summary

Robertson & Company Ltd. is seeking a Director of Governance, Risk, and Compliance to lead the development and implementation of governance, risk, and compliance strategies across the organization.

In this permanent, full-time role with hybrid work in Downtown Toronto, you will oversee risk management, ensure regulatory compliance, coordinate internal and external audits, and work closely with senior leadership to embed GRC into strategic decisions.

Qualifications

• 10+ years of experience in cybersecurity, information security, technology risk, IT controls, or related disciplines.
• 5+ years of direct Governance, Risk & Compliance (GRC) experience.
• 3+ years of leadership experience within cybersecurity, technology risk, or compliance functions.
• Experience working within regulated industries such as financial services, banking, fintech, insurance, payments, or wealth management.
• Demonstrated experience managing regulatory compliance initiatives, executive reporting and remediation tracking.

Responsibilities

• Lead the development and maintenance of governance frameworks and policies.
• Oversee risk management processes across the organization.
• Ensure compliance with applicable laws, regulations, and industry standards.
• Collaborate with senior leadership to embed risk and compliance into strategic decision-making.
• Monitor regulatory changes and assess their impact on organizational policies.
• Manage internal and external audits related to governance and compliance.
• Promote a culture of integrity and compliance throughout the organization.
• Provide leadership and guidance to teams responsible for governance and risk activities.

Skills

Leadership

Stakeholder management

Communication

Regulatory understanding

GRC

Tools

GRC platforms

Job description

Location: Hybrid (Downtown, Toronto) 2-3x/week

Employment Type: Permanent, Full-Time

Compensation: $170,000 - CA$190,000 Base

Overview:

Our client, a leader in the industry, is seeking a dedicated Director of Governance, Risk, and Compliance to join their team. In this role, you will lead efforts to develop and implement comprehensive governance and compliance strategies, ensuring the organization meets regulatory standards and industry best practices.

What you will achieve in this role:

• Lead the development and maintenance of governance frameworks and policies
• Oversee risk management processes across the organization
• Ensure compliance with applicable laws, regulations, and industry standards
• Collaborate with senior leadership to embed risk and compliance into strategic decision-making
• Monitor regulatory changes and assess their impact on organizational policies
• Manage internal and external audits related to governance and compliance
• Promote a culture of integrity and compliance throughout the organization
• Provide leadership and guidance to teams responsible for governance and risk activities

Required Qualifications:

• 10+ years of experience in cybersecurity, information security, technology risk, IT controls, or related disciplines
• 5+ years of direct Governance, Risk & Compliance (GRC) experience
• 3+ years of leadership experience within cybersecurity, technology risk, or compliance functions
• Experience working within regulated industries such as financial services, banking, fintech, insurance, payments, or wealth management
• Demonstrated experience managing:
• Regulatory compliance initiatives
• Executive reporting and remediation tracking
• Strong understanding of enterprise cyber risk management practices and governance frameworks
• Experience supporting audits, regulatory reviews, and control validation activities
• Excellent communication and stakeholder management skills

Strong understanding of:

• Information security governance
• Identity & Access Management (IAM)
• Data protection and privacy controls
• Cloud security frameworks
• Vulnerability management
• Third-party risk management
• Business continuity and operational resilience

Preferred Qualifications:

• Experience within a Canadian financial institution, fintech, or other highly regulated environment
• Professional certifications such as: CISSP, CISM, CRISC, CGEIT, Or ISO 27001 Lead Implementer or Lead Auditor
• Experience implementing or enhancing GRC platforms and workflow automation solutions
• Familiarity with: PCI DSS, SOC 2, Cloud security control frameworks, Privacy compliance frameworks
• Experience mapping controls across multiple compliance and regulatory frameworks

Interviews:

• 1st Round: 30-45 mins with hiring manager
• 2nd Round: In-person case study
• -Offer Stages-

We thank all applicants for their interest; however, only those selected for further consideration will be contacted.

AI Disclosure: Artificial Intelligence may be used as part of our application review process to assist in reviewing, screening and assessment of applicants. All applications are also reviewed by our recruitment team.

Additional Information: Background screening is required as part of the onboarding process. The type of screening required (criminal, credit, or other verifications) will vary based on the position and client requirements.

Robertson & Company values diversity and is an equal opportunity employer committed to an inclusive and accessible recruitment process. Accommodations are available upon request throughout all stages of the hiring process.