Manager, Digital Risk & Compliance

Atlas Corporation; Canada; On-site; CAD 110,000 - 137,000; Full time

Job summary

A leading shipping company in Canada seeks a Digital Risk & Compliance Manager to enhance their cybersecurity posture. The role involves developing risk management frameworks and leading vulnerability management initiatives. Candidates should have a bachelor's degree in a relevant field and over 7 years of experience in cybersecurity. This position offers a competitive salary of $110,000 – $137,000 CAD per year, reflecting the skills and experience of the applicant.

Qualifications

• 7+ years of experience in cybersecurity, risk management, or compliance roles.
• Proven experience managing direct reports and third-party service providers.
• Strong understanding of vulnerability management tools and processes.

Responsibilities

• Develop, implement, and maintain digital risk management frameworks.
• Own the end-to-end vulnerability management lifecycle.
• Design and deliver security awareness and training programs.

Skills

Leadership

Analytical skills

Communication

Problem-solving

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field

Tools

Qualys

Tenable

Rapid7

Job description

Select how often (in days) to receive an alert:

Seaspan employees are goal-driven and share a high-performance culture, focusing on building services offerings to become a leading asset manager. Seaspan provides many of the world's major shipping lines with alternatives to vessel ownership by offering long-term leases on large, modern containerships and pure car, truck carriers (PCTCs) combined with industry leading ship management services. Seaspan's fleet has evolved over time to meet the varying needs of our customer base. We own vessels in a wide range of sizes, from 2,500 TEU to 24,000 TEU vessels. As a wholly owned subsidiary of Atlas Corp, Seaspan delivers on the company's core strategy as a leading asset management and core infrastructure company.

Position Description:

Reporting to the Sr. Manager, Global Cyber Security & Risk, the Digital Risk & Compliance Manager is responsible for building and leading the day-to-day operations of Seaspan's digital risk and compliance function. This role is also responsible for managing vulnerability remediation and security awareness and training programs. This role will play a critical part in strengthening our cyber risk posture, ensuring compliance with internal and external standards, and fostering a culture of security across the organization. The ideal candidate is a strategic thinker with hands‑on risk and compliance experience, and strong leadership skills.

Job Responsibilities:

Risk & Compliance Management

• Develop, implement, and maintain digital risk management frameworks aligned with business objectives and regulatory requirements.
• Monitor compliance with internal policies, industry standards (e.g., ISO 27001, NIST), and applicable laws.
• Lead internal audits and support external audits related to cybersecurity and digital risk.

Vulnerability Management

• Own the end‑to‑end vulnerability management lifecycle, including scanning, assessment, prioritization, remediation tracking, and reporting.
• Collaborate with IT and application teams to ensure timely resolution of identified vulnerabilities.
• Provide executive‑level reporting and metrics on vulnerability trends and remediation performance.

Security Awareness & Training

• Design and deliver a comprehensive security awareness and training program tailored to various roles and risk profiles.
• Conduct phishing simulations, track engagement, and continuously improve program effectiveness.
• Promote a security‑first mindset across the organization through campaigns, workshops, and targeted communications.

Governance & Reporting

• Develop and maintain dashboards and reports for senior leadership on risk posture, compliance status, and program effectiveness.
• Lead and support the development and maintenance of cybersecurity policies, standards, and procedures.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 7+ years of experience in cybersecurity, risk management, or compliance roles.
• Proven experience managing direct reports and third‑party service providers.
• Certifications such as CRISC, CCSP, and CISM, or an equivalent combination of education, training, and experience.
• Familiarity with frameworks and standards and implementation of those for on‑premise, cloud, and OT.
• Strong understanding of vulnerability management tools (e.g., Qualys, Tenable, Rapid7) and processes.
• Experience designing and managing security awareness programs.
• Technical knowledge in networking, server infrastructure, operating systems, data center and cloud operations, telecommunications, virtualization, storage technologies, remote user management, and database security.
• Excellent leadership, communication, and stakeholder management skills.
• Strong analytical and problem‑solving abilities.
• Ability to work under time pressure and manage multiple priorities.

Additional Desired Qualifiations:

• Experience with maritime cyber security.
• Experience with building automation and integration across cyber security tools.

Job Demands and/or Physical Requirements:

• Availability via a mobile device outside of office hours.
• Occasional travel may be required and may be on short notice.

Compensation and Benefits Package:

Seaspan’s total compensation is based on our pay‑for‑performance philosophy that rewards team members who deliver on and demonstrate our high‑performance culture. The hiring range for this position is $110,000 – $137,000 CAD per annum. The exact base salary offered will be commensurate with the incumbent’s experience, job‑related skills and knowledge, and internal pay equity.

Seaspan Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, colour, religion, gender, sexual orientation, gender identity, national origin, disability, or protected Veteran status. We thank all applicants in advance. If your application is shortlisted to be included in the interview process, one of our team will be in contact with you.