Remote Cyber Security Lead: GRC, Audits & Vulnerability Mgmt

mdf commerce; Longueuil; Remote; CAD 95,000 - 130,000; Full time

Job summary

A leading public procurement platform is seeking an experienced Information Security Manager to oversee audit readiness and vulnerability management. The ideal candidate will have at least 10 years of experience in information security, deep knowledge of key compliance frameworks, and strong technical skills in GRC tools and vulnerability assessment. This position offers the opportunity to work remotely within Canada or the USA.

Benefits

Work from home flexibility

Inclusive company culture

Professional development opportunities

Qualifications

• Minimum 10 years of experience in information security.
• Deep knowledge of SOC 2 Type 2, PCI DSS, and FISMA RMF.
• Expert in trust portal development and management.

Responsibilities

• Lead audit readiness and annual cycles for SOC 2 Type 2 and PCI DSS.
• Plan and close out internal and external audits.
• Develop vulnerability metrics for leadership presentations.

Skills

Communication skills

Autonomy

Organizational skills

Technical depth in information security

Education

Certifications (CISSP, CISM, CISA, etc.)

Tools

GRC tools (Drata, Vanta, etc.)

Vulnerability management platforms (Tenable, Qualys, etc.)

AWS knowledge

SIEM, EDR, CSPM proficiency

Job description

A leading public procurement platform is seeking an experienced Information Security Manager to oversee audit readiness and vulnerability management. The ideal candidate will have at least 10 years of experience in information security, deep knowledge of key compliance frameworks, and strong technical skills in GRC tools and vulnerability assessment. This position offers the opportunity to work remotely within Canada or the USA.