Manager IT GRC

407 ETR; Vaughan; On-site; CAD 100,000 - 130,000; Full time

Job summary

Join a leading company as the Manager IT GRC to oversee governance, risk, and compliance initiatives. You will drive change in IT security practices and ensure adherence to key regulations. With a commitment to diversity and inclusion, this role offers an engaging work environment where your expertise and leadership will be highly valued.

Qualifications

• Minimum of 7 years of experience in IT security or related fields.
• Experience with GRC and relevant certifications preferred.
• Intermediate to advanced knowledge of O365 and AWS.

Responsibilities

• Develop, maintain, and update all IT Security policies.
• Conduct risk assessments and tabletop exercises.
• Facilitate internal and third-party audits.

Skills

Vendor management

Risk management

Security compliance

Stakeholder management

Education

College Diploma or University Degree

Tools

O365

AWS

Job description

Join us to apply for the Manager IT GRC role at 407 ETR

Reporting to the Senior Manager, IAM & GRC, the Manager – IT Governance, Risk and Compliance plays a key role in ensuring information security and compliance at 407 ETR. This includes elaborating and maintaining internal and external audits, vendor due diligence, and security risk management programs. The role involves developing, maintaining, and updating all IT Security policies and control processes in collaboration with relevant stakeholders. The ideal candidate is an experienced professional passionate about leading and improving organizational processes to ensure compliance and risk management, balancing security risks with business enablement.

Responsibilities

• Drive change and leadership best practices, supporting corporate programs to bring consistency to our people strategy, and supporting Diversity, Equity, and Inclusion initiatives.
• Monitor emerging technologies to gain a competitive advantage in information security and risk management.
• Collaborate with IT and business units to assess, design, and implement sustainable security solutions and processes.
• Work with business units to ensure compliance and address related questions and issues.
• Document and meet standards, processes, procedures, and metrics.
• Consult with Application Security, Risk, and Controls teams.
• Facilitate and support internal and third-party audits.
• Conduct risk assessments and tabletop exercises, and work with incident response plans.
• Assist with Disaster Recovery and Business Continuity planning.
• Perform assessments and remediation activities to ensure systems and controls comply with policies and frameworks.
• Develop and enhance information risk management strategies and processes.
• Manage risk assessments, risk registries, and mitigation strategies.
• Maintain risk tolerance metrics and provide guidelines to keep exposure within limits.
• Identify, communicate, and work with teams on risk mitigation.

Compliance

• Ensure adherence to legislation and regulations like PCI DSS.
• Assess technology solutions and third parties for compliance with security policies and standards.

Governance

• Assist in developing and maintaining security policies and procedures.
• Improve governance frameworks and reporting in collaboration with IT leadership.
• Oversee information security governance initiatives.
• Support Data Governance programs including classification, storage, and quality management.

Qualifications

• Minimum of 7 years of experience in IT security or related fields.
• College Diploma or University Degree in relevant fields preferred.
• Intermediate to advanced knowledge of O365 and AWS.
• Experience with GRC and relevant certifications (e.g., CISA, CISM, CRISC, CGEIT, CISSP) preferred.
• Knowledge of security frameworks like PCI DSS, ISO 27001 / 27002, COBIT, NIST.
• Familiarity with Agile methodologies is a plus.
• Strong stakeholder and vendor management skills.

At 407 ETR, we are committed to fostering a diverse, equitable, and inclusive work environment. We value the unique perspectives of all individuals and are dedicated to creating a safe, supportive environment for all employees. Accommodation for disabilities or other protected grounds is available upon request during the employment process.