GRC Security Leader: Strategy, Risk & Compliance

BDO Canada; Oakville; Hybrid; CAD 132,000 - 182,000; Full time

Job summary

BDO Canada is seeking a Senior Manager, Information Security to lead cybersecurity governance, risk, and compliance across the organization. The role includes implementing policies, coordinating audits, and guiding a team of security professionals.

You will work with IT, Risk, Legal, Compliance, and business teams to ensure alignment with ISO 27001, NIST, SOC 2, GDPR, and HIPAA, while maturing the enterprise security program and resilience.

Qualifications

• Education: Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or related field.
• Experience: 10+ years in IT security or risk management with 2+ years leading teams managing regulatory or compliance programs.
• Certifications: CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Technical Skills: Proficiency in GRC tools, LDAP/AD, SAML, OIDC, cloud security, SIEM, vulnerability management, and ITSM integrations.
• Soft Skills: Leadership, communication, stakeholder engagement, problem-solving, and decision-making abilities.

Responsibilities

• Lead IT security governance, risk, and compliance strategy and programs.
• Oversee risk assessments, audits, vendor security evaluations, and policy enforcement.
• Manage and mentor a security team of analysts or specialists.
• Collaborate across IT, Risk, Legal, Compliance, and business units on compliance with ISO 27001, NIST, SOC 2, GDPR, HIPAA.
• Develop and implement GRC platform deployments for automated monitoring and reporting.
• Provide strategic advisory to executives on IT risk and compliance.

Skills

Leadership

Communication

Stakeholder engagement

Problem solving

Education

Bachelor's degree in IT/cybersecurity/compsci

Tools

GRC tools

LDAP/AD

SAML

OIDC

SIEM

Vulnerability management

ITSM platforms

Job description

BDO Canada is seeking a Senior Manager, Information Security to lead cybersecurity governance, risk, and compliance across the organization. The role includes implementing policies, coordinating audits, and guiding a team of security professionals.

You will work with IT, Risk, Legal, Compliance, and business teams to ensure alignment with ISO 27001, NIST, SOC 2, GDPR, and HIPAA, while maturing the enterprise security program and resilience.