Senior IT Security & GRC Leader

BDO Canada; Toronto; Hybrid; CAD 132,000 - 182,000; Full time

Job summary

BDO Canada is seeking a Senior Manager, Information Security to lead cybersecurity governance, risk management, and compliance programs across the organization, ensuring policies meet ISO 27001, NIST, SOC 2 and privacy regulations.

You will build and mentor a high-performing GRC team, oversee audits, vendor risk, policy development, and implement a governance framework with automation. The role collaborates with IT, Risk, Legal and business teams; blended work arrangement in Canada.

Qualifications

• 10+ years in IT security or risk management with 2+ years leading teams managing regulatory or compliance programs.
• Experience in technology risk consulting, IT audits, and multi-country compliance programs is highly valued.
• Certifications such as CISSP, CISM, CRISC, CISA, or CGEIT are preferred.

Responsibilities

• Lead cybersecurity governance, risk management, and compliance programs across the organization.
• Oversee risk assessments, audits, vendor security evaluations, policy enforcement, and team leadership.
• Collaborate with IT, Risk, Legal, Compliance and business teams to maintain compliance with ISO 27001, NIST, SOC 2 and privacy regulations.

Skills

Leadership

Communication

Stakeholder Engagement

Regulatory Compliance

Risk Management

GRC Frameworks

InfoSec Governance

Education

Bachelor's degree in Information Technology, Cybersecurity, or related field

Tools

GRC tools

LDAP/AD

SAML

OIDC

SIEM

Vulnerability management

ITSM platforms

Job description

BDO Canada is seeking a Senior Manager, Information Security to lead cybersecurity governance, risk management, and compliance programs across the organization, ensuring policies meet ISO 27001, NIST, SOC 2 and privacy regulations.

You will build and mentor a high-performing GRC team, oversee audits, vendor risk, policy development, and implement a governance framework with automation. The role collaborates with IT, Risk, Legal and business teams; blended work arrangement in Canada.