Hybrid IT GRC Lead: PCI, Risk & Compliance

Four Seasons; Toronto; Hybrid; CAD 85,000 - 125,000; Full time

Job summary

Four Seasons Hotels and Resorts seeks a Manager, IT Governance, Risk & Compliance for a 7-month contract, based in Toronto with hybrid work. You will lead PCI, IT risk, and governance programs across global properties, coordinating with the home office and QSA, and driving evidence collection and remediation.

Bring 5+ years in PCI/GRC, strong policy development, and hands-on experience with ServiceNow and other GRC tools to support audits, risk assessments, and regulatory compliance while

Qualifications

• Bachelor’s degree or equivalent business qualifications.
• Minimum 5 years of experience with PCI standards and GRC methodologies.
• Strong knowledge of governance frameworks and risk management practices.

Responsibilities

• Lead Corporate PCI compliance program and related audit processes.
• Coordinate evidence collection, remediation tracking, and audit remediation.
• Manage PCI self-attestation, RoC, AoC, and relationships with QSA.
• Oversee global PCI compliance across properties and home office.
• Develop and maintain IT policies, standards, and procedures; deliver training.

Job description

Four Seasons Hotels and Resorts seeks a Manager, IT Governance, Risk & Compliance for a 7-month contract, based in Toronto with hybrid work. You will lead PCI, IT risk, and governance programs across global properties, coordinating with the home office and QSA, and driving evidence collection and remediation.

Bring 5+ years in PCI/GRC, strong policy development, and hands-on experience with ServiceNow and other GRC tools to support audits, risk assessments, and regulatory compliance while