GRC and Cybersecurity Consultant

GRC and Cybersecurity Consultant (Entry-Level and Intermediate Opportunities)

We’re looking for motivated GRC & Cybersecurity Consultants at the junior and intermediate levels to join our growing team.

Whether you’re a recent graduate looking to build your career in cybersecurity or an experienced professional ready to take on more complex client engagements, this is an opportunity to gain hands-on experience across cybersecurity, risk management, compliance, and advisory services.

You’ll work alongside experienced security professionals to help clients assess their security posture, strengthen governance practices, address compliance gaps, and manage cyber risk. Depending on your experience, you’ll receive mentorship and guidance or take greater ownership of client engagements, assessments, and recommendations.

This role is ideal for someone who enjoys solving problems, working with clients, and translating cybersecurity requirements into practical solutions.

What You’ll Do

Governance, Risk & Compliance

• Support the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks.
• Work with industry frameworks and standards, including NIST CSF, CIS Controls, ISO 27001, and SOC 2.
• Conduct cybersecurity maturity assessments, risk assessments, control gap analyses, and vendor security reviews.
• Help clients identify, evaluate, and prioritize risks across people, processes, and technology.
• Maintain risk registers, track vulnerabilities, and support the development of risk treatment plans and remediation roadmaps.
• Support ongoing compliance activities, audit readiness, evidence collection, control testing, and remediation.

Client Engagement & Consulting

• Assist with delivering cybersecurity and compliance projects for clients across different industries.
• Prepare clear documentation, reports, presentations, and recommendations for technical and business stakeholders.
• Participate in client meetings, workshops, and training sessions.
• Help clients translate security requirements into practical, achievable improvements.
• For intermediate-level consultants, take greater ownership of assessments, client deliverables, engagement activities, and recommendations.

Internal IT & Security Operations

• Support internal IT and security activities, including troubleshooting, device setup, user access management, and employee onboarding and offboarding, as applicable.
• Help maintain internal security documentation, asset inventories, policies, and procedures.
• Contribute to security awareness initiatives and continuous improvement of internal processes.

What You Bring

• Education in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field, or equivalent practical experience.
• An interest in cybersecurity, Governance, Risk & Compliance, risk management, and consulting.
• An understanding of cybersecurity principles, security controls, operating systems, networking, or cloud technologies.
• Familiarity with frameworks such as NIST CSF, CIS Controls, ISO 27001, SOC 2, or similar standards.
• Strong analytical, problem-solving, organizational, and communication skills.
• Attention to detail and the ability to produce clear, accurate documentation.
• A collaborative, proactive approach and a willingness to learn, adapt, and take initiative.
• A client-focused mindset and the ability to communicate technical concepts to different audiences.

For junior candidates: We welcome recent graduates and early-career professionals. Previous full-time cybersecurity experience is not required. Relevant coursework, co-op placements, internships, certifications, or IT support experience are valuable.

For intermediate candidates: We’re looking for relevant experience in cybersecurity, GRC, IT audit, risk management, or consulting, along with the ability to contribute more independently to assessments, client deliverables, and remediation activities.

Nice to Have

• Experience with or exposure to Microsoft 365, Microsoft Entra ID, Intune, or endpoint management tools.
• Certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, or relevant ISO 27001 credentials.
• Experience with security assessments, risk registers, control testing, audit preparation, policy development, or compliance programs.
• Experience supporting multiple projects or client engagements in a consulting or professional services environment.

Location:

• This is a hybrid role, requiring you to be onsite 3 days a week.
• Our office is located in the heart of the Financial District, with access to the PATH at 121 King St W.
• We welcome applications from candidates based anywhere in Canada who are willing to relocate to the Toronto area in the near future.