IT Security Governance & Compliance Lead

YM Inc; Toronto; On-site; CAD 65,000 - 75,000; Full time

Benefits offered by this job

Health and Dental Benefits Plan

Paid Sick Days

Employee Discount

Tuition Reimbursement

Ongoing Training and Development

Career Advancement Opportunities

Being part of an amazing, supportive a

Job summary

YM Inc. is seeking an IT Security Governance & Compliance Specialist to lead governance, risk, and compliance across the organization. You will coordinate audits, manage policy development, and collaborate with internal teams and vendors to strengthen security controls.

The role emphasizes governance over hands-on engineering, with responsibilities spanning PCI, SOC oversight, risk tracking, and incident coordination to drive audit readiness and program maturity.

Qualifications

• Governance, risk, and compliance responsibilities across IT security.
• Experience coordinating audits, risk tracking, and policy management.
• Strong understanding of PCI and SOC governance processes.

Responsibilities

• Develop, maintain, and update IT security policies, standards, and guidelines.
• Coordinate PCI/compliance activities and tabletop exercises.
• Own risk register, risk owners, and remediation tracking.
• Serve as primary liaison for SOC vendors and incident escalation.
• Coordinate third-party security assessments and vendor reviews.
• Develop security awareness campaigns and training programs.
• Collaborate with server/network/DBA/retail teams to enforce controls.

Skills

Security governance

Risk assessments

PCI compliance

SOC monitoring

Incident coordination

Third-party risk

Security awareness

Cross-functional collaboration

Tools

FortiSIEM

LCM

Job description

YM Inc. is seeking an IT Security Governance & Compliance Specialist to lead governance, risk, and compliance across the organization. You will coordinate audits, manage policy development, and collaborate with internal teams and vendors to strengthen security controls.

The role emphasizes governance over hands-on engineering, with responsibilities spanning PCI, SOC oversight, risk tracking, and incident coordination to drive audit readiness and program maturity.