No matching filters. Try another name.
EY
3+ YOECandidates need 3 to 5 years of experience in ERP security, IT governance and risk assessment, plus a relevant bachelor's degree. An accounting or audit designation such as CPA, CIA or CISA, or working towards one, is required, and knowledge of COBIT, ITIL, SAP or Oracle is an asset.
SAP, Oracle, Windows, SharePoint, GRC solutions
Scotiabank
10+ YOECandidates need a university degree in computer science, engineering, information security or a related field, and 10+ years of progressive technology or cybersecurity risk experience, including senior leadership of assessment functions. Strong expertise in threat modelling, third-party security, cloud and AI security, and GRC transformation on ServiceNow IRM is required.
ServiceNow IRM
Pwc Canada
Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to translate them into practical client advice. Technical designations such as CISSP, CRISC or CISA are preferred, along with strong business and technical communication skills.
GRC platforms
Sopra Steria: The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range…
5+ YOECandidates need 5+ years in CERT, SOC, SecOps or GRC roles, and knowledge of incident management frameworks such as ISO 27035, NIST and SANS. Calm leadership under pressure, strong written and spoken English, and cybersecurity certifications such as GCFA, CISSP or ECIH are expected.
SOC tools, forensic tools
The Globe and Mail
5+ YOECandidates need at least 5 years of privacy and data governance experience and a post-secondary degree or equivalent experience with continuing professional development. They must know Canadian privacy law, have project or program management experience, and be comfortable explaining technical data systems and controls.
Consent management system, GRC tools
The Globe and Mail
5+ YOECandidates need at least 5 years of privacy and data governance experience and knowledge of Canadian privacy laws. They also need data mapping, privacy impact assessment and project management experience, plus enough technical knowledge of databases, cloud and data flows to work with IT teams.
consent management system
PricewaterhouseCoopers LLP
Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to turn them into practical client advice. Strong written, verbal and presentation skills for senior executives are required, and CISSP, CRISC or CISA are preferred.
GRC platforms
Zurich Insurance Company Ltd.
3+ YOECandidates need a bachelor's degree with 3+ years of risk management experience, or a high school diploma with 5+ years. Preferred skills include internal control frameworks such as COSO and ICFR, GRC platform experience, and strong Excel and PowerPoint skills.
Polaris, ServiceNow IRM, Archer, Microsoft Excel, Microsoft PowerPoint
Aplin
Candidates need a proven leadership background in technology risk, IT governance, IT audit or security GRC in regulated environments. They should know control testing, risk registers and frameworks such as ISO, NIST, COBIT and ITIL, and have DR planning experience.
Leadership, Stakeholder management, ITIL, CISA, CISSP
Optro
8+ YOEOptro needs a licensed lawyer in good standing in their state of residence, with 8+ years of in-house transactional experience and 5+ years negotiating SaaS agreements with enterprise customers. Strong organization, communication and contract management skills are required.
Microsoft Office
Optro
8+ YOECandidates need 8+ years of HR experience, including at least 5 years as a People Business Partner, plus strong knowledge of state and federal employment laws. They also need excellent communication skills and a data-driven approach to people metrics.
Employment law, Communication skills
TSX Inc.
Candidates need current enrolment in a post-secondary program in computer science, cybersecurity, IT or a related field. They also need basic knowledge of information security and frameworks such as NIST CSF or ISO 27001, strong Excel skills, and good communication and organization skills.
Microsoft Excel, Google Sheets, ServiceNow, Google Workspace
Alcool NB Liquor
3+ YOECandidates need 3 to 5 years of governance, risk and compliance experience focused on audit and compliance, knowledge of frameworks such as ISO 27001 and NIST, and PCI DSS experience. They must communicate security concepts to non-technical staff and be based in New Brunswick.
Power BI, Excel, GRC platform
Reinsurance Group of America
10+ YOE5+ MgmtCandidates need a bachelor's degree or equivalent experience, 10+ years in operational risk or a related second-line role in insurance or financial services, and 5+ years of people management. They also need insurance or reinsurance industry experience, experience with a GRC platform, and strong knowledge of frameworks such as ORSA, Solvency II, COSO and ISO 31000.
ServiceNow IRM, Archer, MetricStream, Power BI, spreadsheets, databases
Irth Solutions
8+ YOE3+ MgmtCandidates need 8+ years in cybersecurity engineering or security operations, including 3+ years leading a security function, ideally in SaaS. Hands-on cloud security experience on AWS and Azure, SOC 2 Type II or ISO 27001 control ownership, and the ability to review code and infrastructure configurations are also required.
AWS CloudTrail, Microsoft Entra ID, AWS IAM, Wiz
Ontario Power Generation: As the province’s largest clean power generator, OPG operates one of North America’s most diverse generating fleets.
6+ YOECandidates need a 4-year computer science degree and at least 6 years in cyber risk, consulting or third-party cyber risk management. Ontario Power Generation expects strong knowledge of NIST CSF, CIS, ISO 27001, NERC-CIP and GRC tools such as ServiceNow IRM or Archer.
ServiceNow IRM, Archer
Citi
6+ YOECiti asks for 6 to 8 or more years of experience in IT application management, technology project management and technology risk or compliance in regulated industries. Candidates need hands-on work with enterprise GRC platforms, knowledge of frameworks such as SOX, GDPR, NIST and ISO 27001, and project management skills in Agile and ITIL.
ServiceNow IRM, Archer, MetricStream, OneTrust, Actimize, Jira
21 companies