Senior Security GRC Leader: Risk, Compliance & Strategy

BDO Canada; Markham; Hybrid; CAD 132,000 - 182,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Benefits from day one

Flexible personal time off

Job summary

BDO Canada is seeking a Senior Manager, Information Security to lead the organization’s GRC programs, aligning policy, risk, and compliance with ISO 27001, NIST, SOC 2 and privacy regulations. You will mentor a security team and partner with IT, Legal and Risk to drive regulatory compliance and enterprise resilience.

In this cross-functional role, you will oversee risk assessments, audits, vendor security evaluations, and the deployment of governance frameworks, ensuring effective controls and

Qualifications

• 10+ years in IT security or risk management with enterprise scope.
• 2+ years leading teams managing regulatory or compliance programs.

Responsibilities

• Lead and mentor a high-performing GRC team.
• Identify, assess, and monitor IT-related risks and drive resolution plans.
• Plan and coordinate internal audits, third-party audits, and regulatory assessments.

Skills

GRC tools

IAM (LDAP/AD)

Cloud security

SIEM

Vulnerability mgmt

Leadership

Stakeholder engagement

Strategic risk mgmt

Education

Bachelor’s degree in IT / Cybersecurity

Tools

GRC software

SIEM tools

Cloud security tools

Job description

BDO Canada is seeking a Senior Manager, Information Security to lead the organization’s GRC programs, aligning policy, risk, and compliance with ISO 27001, NIST, SOC 2 and privacy regulations. You will mentor a security team and partner with IT, Legal and Risk to drive regulatory compliance and enterprise resilience.

In this cross-functional role, you will oversee risk assessments, audits, vendor security evaluations, and the deployment of governance frameworks, ensuring effective controls and