IT Compliance, Lead

Interac Corp.; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Lead for IT Compliance to enhance audit and regulatory compliance activities. This pivotal role involves collaborating with stakeholders to maintain ISO 27001 Certification, manage risks, and develop training and documentation. You will engage in creating compliance frameworks and ensuring alignment with industry standards. Join a forward-thinking company that values excellence and offers a supportive environment for professional growth. If you are a creative thinker with a passion for compliance and risk management, this opportunity is perfect for you.

Benefits

Competitive Pay

Ongoing Education

Supportive Environment

Benefits Package

Qualifications

• Over 7 years of experience in IT, risk management, governance, or related fields.
• Relevant certifications such as ITIL V4, COBIT, CRISC, CISSP are assets.

Responsibilities

• Maintaining a risk register to track and remediate gaps identified during audits.
• Creating reports to measure the effectiveness of technical controls.

Skills

IT Risk Management

Stakeholder Management

Communication Skills

Conflict Resolution

Data Analytics

Education

Degree in Computer Science

Degree in Information Security

Degree in Business

Tools

GRC Tool

PowerPoint

Excel

Job description

Join to apply for the IT Compliance, Lead role at Interac Corp.

At Interac, we design and deliver products and solutions that give Canadians control over their money so they can get more out of life. We are leading in real-time money movement, innovative commerce solutions like open payments, and advancements in verification and open banking, shaping the future of the digital economy in Canada.

We seek creative thinkers, problem solvers, and high-performance application developers. If you are interested, we want to hear from you.

In this role, collaborating with the Leader of the Business and Information Security Office (BISO) & IT Compliance Management, you will engage with stakeholders to maintain and improve audit, regulatory, and contractual compliance activities, including maintaining ISO 27001 Certification.

This position involves stakeholder management, risk management, training, and documentation development.

Responsibilities include:

• Maintaining a risk register to track and remediate gaps identified during audits, security assessments, or reviews, including managing risk acceptances and exceptions.
• Creating reports to measure the effectiveness of technical controls and proposing compensating controls.
• Enhancing compliance risk assessment frameworks.
• Contributing to compliance initiatives with technical and business insights.
• Aligning security policies with industry standards such as ISO 27001/2, PCI DSS, CIS, NIST.
• Building compliance awareness across business units through communication and guidance.
• Reviewing documents and architecture diagrams for risk assessment.
• Collaborating with stakeholders to make risk-based recommendations to improve compliance posture.
• Balancing operational needs with security concerns for informed risk decisions.
• Facilitating security assessments and audits with internal and external stakeholders.
• Training stakeholders on compliance and regulatory requirements.
• Acting as a key interface with auditors for compliance activities.
• Developing and updating technical documentation supporting compliance efforts.
• Ensuring business continuity and disaster recovery plans are in place and maintained.
• Staying current with industry best practices and cybersecurity risks.

Qualifications:

• Degree in Computer Science, Information Security, Business, or equivalent experience.
• Relevant certifications such as ITIL V4, COBIT, CRISC, CISSP are assets.
• Over 7 years of experience in IT, risk management, governance, or related fields.
• Experience managing a GRC tool.
• Strong leadership, communication, negotiation, and conflict resolution skills.
• Knowledge of risk/control frameworks like ITIL, ISO, COBIT, NIST, PCI.
• Ability to manage conflicting stakeholder goals through maturity and governance skills.
• Knowledge of banking practices, regulations, and related systems.
• Proficiency in PowerPoint, Excel, data analytics, and dashboarding.
• Eligibility to work in Canada for Interac Corp.

Interac requires background checks including criminal record, safety verification, ID cross-check, employment and education verification, and possibly credit/social media checks.

Work Culture and Benefits:

We promote a culture of excellence, connection, and shared values. Benefits include competitive pay, benefits, ongoing education, and a supportive environment.

Beware of fraudulent job offers using Interac’s name. Interac will never ask for money for employment. Exercise caution and report suspicious activity.