Senior Governance, Risk & Compliance Specialist

Slice; Ottawa; On-site; CAD 80,000 - 110,000; Full time

Job summary

A technology services provider in Ottawa is seeking a Senior GRC Specialist to lead compliance initiatives and maintain security governance. The candidate will coordinate audits and work closely with various teams to ensure security controls are effective and aligned with operational realities. The role demands strong skills in IT, project management, and communication. The company offers competitive benefits including flexible working hours and additional wellbeing allowances.

Benefits

Access to medical, dental, and vision plans

Flexible working hours

Generous time off policies

Individual employee wellbeing allowance

Qualifications

• Deep understanding of IT and process controls.
• Experience managing compliance activities for audits.
• Familiarity with privacy regulations and security frameworks.

Responsibilities

• Lead compliance activities across the organization.
• Coordinate external and internal audits like PCI DSS and SOC 2.
• Design and mature security controls and processes.

Skills

IT and process controls

PCI DSS

SOC 2

NIST-based security controls

cybersecurity knowledge

project management

stakeholder influence

communication skills

Education

CISM

CISA

CISSP

Tools

Shortcut

Google Docs

Google Sheets

Google Slides

Job description

Ilir Sela started Slice with the belief that local pizzerias deserve all of the advantages of major franchises without compromising their independence. Starting with his familys pizzerias we now empower over tens of thousands of restaurants with the technology services and collective power that owners need to better serve their digitally minded customers and build lasting businesses. Were growing and adding more talent to help fulfil this valuable mission. Thats where you come in.

This position is open to applicants based in Canada in the Ontario province.

The Challenge to Solve

As a Senior GRC Specialist at Slice you will join the Information Security Compliance and Privacy team and play a key role in driving our security governance and compliance initiatives. You will help shape how Slice understands its security posture beyond purely technical controls ensuring our company remains protected while meeting the regulatory expectations of a growing global product portfolio.

The Role

You will lead and coordinate compliance activities across the organisation managing external and internal audits (PCI DSS SOC 2 SOX) and supporting assessments against frameworks such as NIST ISO 27001 and US privacy regulations. Youll work closely with Engineering IT Finance and Business teams to ensure our security controls are effective practical and aligned with operational realities.

This role is ideal for someone who is comfortable switching between hands‑on execution policy development and strategic advisory work. You will help ensure Slice remains compliant secure and ready to meet the demands of future growth.

A typical week may include:

• Acting as a trusted advisor to teams across Slice on governance risk and compliance topics
• Leading the preparation evidence collection and follow‑up activities for audits
• Designing and maturing security controls and processes from third‑party risk management to access reviews
• Writing and updating corporate security policies and procedures
• Conducting vendor security reviews and supporting non‑technical security investigations
• Administering and improving security awareness training
• Tracking security projects and workstreams using tools like Shortcut Google Docs/Sheets/Slides
• Collaborating cross‑functionally to drive a scalable and proactive GRC and Privacy programme

The Team

Youll join a small but mighty team who are focused on governance risk and security responsibilities across Slice. This position reports directly to the Head of Information Security and Compliance.

The Winning Recipe

Were looking for driven people who know security and compliance and can lead programmes. These are the core competencies this role calls for:

• Deep understanding of IT and process controls
• Experience with PCI DSS SOC 2 SOX or NIST‑based security controls
• Solid general cybersecurity knowledge
• Relevant certifications such as CISM CISA or CISSP (or working toward them)
• Ability to own and manage projects and influence stakeholders
• Strong written and verbal communication skills

The Extras

• Access to medical dental and vision plans
• Flexible working hours
• Generous time off policies
• Individual employee wellbeing allowance

The Hiring Process

• Application
• 30 minute introductory meeting with your Recruiter
• 45 minute Hiring Manager meeting
• 45 minute Peer Interview
• Offer!

Pizza brings people together. Slice is no different. Were an Equal Opportunity Employer and embrace a diversity of backgrounds cultures and perspectives. We do not discriminate on the basis of race colour gender sexual orientation gender identity or expression religion disability national origin protected veteran status age or any other status protected by applicable national federal state or local law. We are also proud members of the Diversity Mark NI initiative as a Bronze Member.

Privacy Notice Statement of Acknowledgment

When you apply for a job on this site the personal data contained in your application will be collected by Slice. Slice is keeping your data safe and secure. Once we have received your personal data we put in place reasonable and appropriate measures and controls to prevent any accidental or unlawful destruction loss alteration or unauthorised access. If selected we will process your personal data for hiring /employment processes as well as our legal obligations.

If you are not selected for the job position and you have given consent on the question below (by selecting Give consent) we will store and process your personal data and submitted documents (CV) to consider eligibility for employment up to 365 days (one year). You have the right to withdraw your previously given consent for storing your personal data and CV in the Slice database considering eligibility for employment for a year. You have the right to withdraw your consent at any time.

For additional information and / or exercise of your rights to the protection of personal data you can contact our Data Protection Officer e-mail: