Information Security & GRC Leader

RiseMe; Toronto; Hybrid; CAD 132,000 - 182,000; Full time

Job summary

BDO Canada is seeking a Senior Manager of Information Security to lead the organization’s governance, risk, and compliance programs, ensuring security policies and regulatory requirements are implemented. The role drives IT security strategy, audits, and vendor risk while mentoring a high-performing security team.

Cross-functional collaboration with IT, Risk, Legal, and Compliance ensures alignment with ISO 27001, NIST, SOC 2, GDPR, and HIPAA, supporting enterprise resilience and regulatory

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or related field.
• 10+ years in IT security or risk management with 2+ years leading teams managing regulatory or compliance programs.
• CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Proficiency in GRC tools, IAM, cloud security, and integration with SIEM and ITSM.

Responsibilities

• Lead cybersecurity governance, risk, and compliance programs.
• Oversee risk assessments, audits, and vendor security evaluations.
• Develop and enforce IT security policies, standards, and procedures.
• Guide vendor and third-party risk assessments and regulatory compliance.
• Manage GRC platform deployment and monitoring for continuous improvement.
• Provide strategic advisory to executive leadership on IT risk.

Skills

Leadership

Stakeholder engagement

Cybersecurity strategy

Regulatory awareness

Education

Bachelor’s degree in IT, Cybersecurity or related field

Tools

GRC tools

LDAP/AD

SAML

OIDC

SIEM

ITSM platforms

Job description

BDO Canada is seeking a Senior Manager of Information Security to lead the organization’s governance, risk, and compliance programs, ensuring security policies and regulatory requirements are implemented. The role drives IT security strategy, audits, and vendor risk while mentoring a high-performing security team.

Cross-functional collaboration with IT, Risk, Legal, and Compliance ensures alignment with ISO 27001, NIST, SOC 2, GDPR, and HIPAA, supporting enterprise resilience and regulatory