GRC Leader: Elevate Security, Compliance & Risk

Interac Corp.; Canada; Hybrid; CAD 150,000 - 180,000; Full time

Benefits offered by this job

Vacation & wellness days

Benefits coverage

RRSP matching

Hybrid work model

Parental leave top-up

Charitable donation matching

Job summary

Interac Corp. seeks a dynamic Leader for Governance, Risk and Compliance to establish the GRC mandate, strengthen IT controls, and drive risk-aware operations across the organization.

You will lead ISMS efforts, coordinate security risk management, and collaborate with internal and external audit teams to meet regulatory and contractual requirements while advancing Interac's security program.

Qualifications

• Degree or combined relevant work experience and certifications (8-10 years) in information systems, law or policy management.
• Progressive leadership experience focusing on information security, governance, risk and compliance.
• Security certifications such as CISM, CISA, and CRISC.
• Experience implementing an ISMS and ISO 27001 certification is a plus.
• Strong understanding of technology risk, regulatory and industry best practice (ISO 27000, NIST, PCI).

Responsibilities

• Review corporate policies and develop policies to enhance controls and alignment with ISO 27000, NIST and PCI standards.
• Socialize policies and provide guidance to employees on adherence.
• Coordinate and guide Information Security Risk Management processes with risk owners to ensure effective treatments.
• Support internal and external audit functions and established certifications.
• Develop, train and monitor the internal control environment for SOC 2, ISO27001/2 and related standards.
• Lead risk remediation and governance lifecycle initiatives to balance risk with operations.
• Provide risk reporting to Management Committees and update risk portfolios regularly.
• Collaborate with Internal Audit, Legal, Enterprise Risk, Data Governance, Privacy, and Vendor Management to strengthen security posture.

Skills

Information security

Governance

Risk management

Compliance

Leadership

Policy management

ISMS

ISO 27001

NIST

PCI

Education

Information systems / law / policy management degree

Tools

GRC platforms

Job description

Interac Corp. seeks a dynamic Leader for Governance, Risk and Compliance to establish the GRC mandate, strengthen IT controls, and drive risk-aware operations across the organization.

You will lead ISMS efforts, coordinate security risk management, and collaborate with internal and external audit teams to meet regulatory and contractual requirements while advancing Interac's security program.