Senior Manager - IT Governance Risk and Control

Enercare Inc.; Markham; On-site; CAD 125,000 - 175,000; Full time

Job summary

Enercare Inc. is seeking a Senior Manager, IT Governance, Risk & Control (IT GRC) to lead critical IT control and risk management.

This senior individual contributor role partners with IT leadership, control owners, Internal Audit, and external auditors to ensure controls are effective and regulatory commitments are met. You will own SOX ITGC, PCI compliance support, and User Access Review processes, driving audit readiness and control excellence across applications, infrastructure, and cloud

Qualifications

• 8+ years of IT governance, risk, compliance, or IT audit experience.
• Hands-on experience with SOX IT General Controls (ITGC).
• Experience supporting PCI DSS compliance activities.
• Proven accountability for User Access Review (UAR) or access certification processes.

Responsibilities

• Act as a trusted subject matter expert for IT governance, risk, and control practices across applications, infrastructure, cloud, and operations.
• Identify, assess, and report on IT risks; maintain the IT risk register and remediation tracking.
• Support the design, operation, and remediation of SOX IT General Controls (ITGC).
• Own accountability for the completeness and auditability of the enterprise User Access Review (UAR) process.
• Ensure SOX and audit cycles execute with high-quality evidence and minimal findings.
• Guide IT teams through the design and validation of compensating controls.
• Support PCI DSS and other IT compliance obligations.
• Act as a primary IT liaison for internal and external audits.
• Educate and coach IT control owners to strengthen audit readiness and control execution.
• Partner with IT, Security, Finance, and Internal Audit to improve IT control environment.

Skills

IT governance

IT risk management

IT audit

SOX ITGC

PCI DSS

Tools

ServiceNow IRM

Archer

AuditBoard

Workiva

Job description

Enercare Inc. is one of Canada’s largest home and commercial services companies servicing over one million customers across Ontario, Manitoba, Saskatchewan, Alberta, British Columbia, Quebec and New Brunswick. Enercare is the Experts at Home, operating under several brands including Enercare, HydroSolution, and Pioneer Plumbing & Heating.

A proudly Canadian-owned company, we are the Experts at what we do and deeply care about our customers. We value a diverse, collaborative culture, and take pride in our commitment to health and safety, and knowing our work serves and supports our communities every day. No matter your role, we invest in making sure you have opportunities to grow, learn, and become the Expert you want to be.

If you are ready to become one of our Experts, we would love to hear from you.

Summary:

Enercare is seeking a Senior Manager, IT Governance, Risk & Control (IT GRC) to play a pivotal hands‑on role in strengthening the control environment across Information Technology. This is a senior individual contributor position designed for a highly experienced GRC professional who thrives on ownership, accountability, and influence—without people management responsibilities.

Operating as a 1B function within the First Line of Defense, this role partners directly with IT leaders, control owners, Internal Audit, and external auditors to ensure risks are identified, controls are effective, and regulatory commitments are met. The role carries enterprise‑wide accountability for critical processes, including SOX ITGC, PCI compliance support, and User Access Reviews (UAR).

Responsibilities

• Act as a trusted subject matter expert for IT governance, risk, and control practices across applications, infrastructure, cloud, and operations.
• Identify, assess, and report on IT risks; maintain the IT risk register and remediation tracking.
• Support the design, operation, and remediation of SOX IT General Controls (ITGC).
• Own accountability for the completeness and auditability of the enterprise User Access Review (UAR) process.
• Ensuring that SOX and audit cycles execute smoothly with high-quality evidence and minimal findings.
• Guide IT teams through the design and validation of compensating controls.
• Support PCI DSS and other IT compliance obligations.
• Act as a primary IT liaison for internal and external audits.
• Educate and coach IT control owners to strengthen audit readiness and control execution.
• Partner with IT, Security, Finance, and Internal Audit to continuously improve the IT control environment.

Qualifications

• 8+ years of experience in IT governance, risk, compliance, or IT audit.
• Hands‑on experience with SOX IT General Controls (ITGC).
• Experience supporting PCI DSS compliance activities.
• Proven accountability for User Access Review (UAR) or access certification processes.
• Strong understanding of IT control frameworks (e.g., COBIT, NIST, ISO 27001).
• Excellent written and verbal communication skills.
• Professional certifications such as CISA, CRISC, CISSP, CISM, or CIA is preferred.
• Experience working within a Three Lines of Defense operating model is preferred.
• Familiarity with GRC tooling such as ServiceNow IRM, Archer, AuditBoard, or Workiva is preferred.

Compensation: $125,000 - $175,000

Please note that the compensation range listed includes base salary and potential incentive pay. Incentives such as bonuses are not guaranteed and depend on individual performance and company results. Actual compensation within the range will be determined based on skills, experience, and qualifications.

Enercare is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, colour, ancestry, national origin, religion, sex, age, sexual orientation, gender identity, citizenship, marital status, disability, pregnancy, military status, protected veteran status or other characteristics protected by applicable law. Enercare’s recruitment process includes accommodation for applicants with disabilities in accordance with applicable provincial accessibility laws and regulations. All accommodations will take into account the applicant’s accessibility needs due to disability and are available upon request.

Our company leverages artificial intelligence (AI) tools as part of the candidate screening process to help review applications efficiently and fairly. These tools may assist in evaluating qualifications against job requirements. All decisions regarding hiring are ultimately made by our recruitment team.