No matching filters. Try another name.
Jane
3+ YOECandidates need 3+ years in product management or a closely related security, GRC or technical program role. They need working knowledge of code scanning, vulnerability management, identity concepts such as SSO and OAuth, and the risks of AI coding agents, plus strong writing and the ability to influence without formal authority.
Randstad Canada
2+ YOECandidates need 2 to 5 years of third-party, vendor, operational risk, compliance or audit experience, strong critical thinking, and clear communication. Experience with OSFI Guideline B-10 and GRC tools is an asset.
Archer, Ivalua, ProcessUnity
West Fraser: West Fraser is a diversified wood products company with facilities in Canada, the U.S., the U.K.
2+ YOECandidates need at least 2 years in GRC, IT audit, ITGC control work or third-party risk, plus a bachelor's degree or equivalent experience. Certifications such as CRISC, CISA, CISM or CISSP are preferred, and strong communication skills are essential.
ServiceNow IRM, Archer, OneTrust
Mackenzie Financial Corporation: Mackenzie Investments is a leading investment management firm providing investment advisory and related services to retail and institutional clients.
3+ YOECandidates need a bachelor's degree, three to five years of business analysis or technology risk experience, and experience documenting requirements. Working knowledge of frameworks such as NIST, ISO 27001 and COBIT, and skill with Excel and Power BI, are also needed.
Excel, Power BI, SQL
Capco: Capco, a Wipro company, is a global technology and management consultancy specializing in driving digital transformation in the financial services…
8+ YOECandidates need 8 to 12+ years of experience, including at least 5 in technology risk, GRC or regulatory compliance, and 3 supporting large financial institutions. Strong skills in control testing, audit evidence, information security standards and Canadian financial regulation are required.
ServiceNow IRM, Archer
Asana
7+ YOECandidates need 7+ years in information security with a focus on risk management and GRC, and hands-on experience with quantitative risk methods such as FAIR. They also need scripting and automation skills, deep knowledge of frameworks like NIST CSF and ISO 27001, and strong communication skills.
FAIR, SIEM, vulnerability scanners, cloud security tooling
Jobgether
7+ YOECandidates need a bachelor's degree or equivalent experience and at least 7 years in cybersecurity, compliance or cloud program management. They need working knowledge of FedRAMP, NIST SP 800-53, ITSG-33 and Protected B, plus Canadian citizenship and eligibility for Reliability Status.
AWS GovCloud, eMASS, SIEM, GRC platform, Ticketing system
EY
3+ YOECandidates need 3 to 5 years of experience in ERP security, IT governance and risk assessment, plus a relevant bachelor's degree. An accounting or audit designation such as CPA, CIA or CISA, or working towards one, is required, and knowledge of COBIT, ITIL, SAP or Oracle is an asset.
SAP, Oracle, Windows, SharePoint, GRC solutions
EY
3+ YOECandidates need 3 to 5 years of experience in ERP security, IT governance and risk assessment, plus a relevant bachelor's degree. An accounting or audit designation such as CPA, CIA or CISA, or working toward one, is valued.
SAP, Oracle, Windows, SharePoint, GRC solutions
Scotiabank
10+ YOECandidates need a university degree in computer science, engineering, information security or a related field, and 10+ years of progressive technology or cybersecurity risk experience, including senior leadership of assessment functions. Strong expertise in threat modelling, third-party security, cloud and AI security, and GRC transformation on ServiceNow IRM is required.
ServiceNow IRM
OCS
7+ YOECandidates need 7+ years of governance, risk, or compliance or information security experience, a bachelor's degree or equivalent, and a GRC or security certification such as CISSP, CISA, or CRISC. Strong knowledge of NIST, ISO 27001, and COBIT is required.
ServiceNow GRC, ServiceNow IRM
BeyondTrust
Candidates need strong written and verbal communication skills and familiarity with NIST 800-53/800-171, ISO 27001 and SOC 2. Project management experience and proficiency in MS Office are also required. A bachelor's degree, CISSP or CRISC, and cloud or SaaS experience are preferred.
Regulatory compliance, Risk management, Process improvement, Documentation, Communication skills, Security regulations
Pwc Canada
Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to translate them into practical client advice. Technical designations such as CISSP, CRISC or CISA are preferred, along with strong business and technical communication skills.
GRC platforms
PricewaterhouseCoopers LLP
Candidates need a firm understanding of frameworks such as NIST, SANS and ISO, and the ability to turn them into practical client advice. Strong written, verbal and presentation skills for senior executives are required, and CISSP, CRISC or CISA are preferred.
GRC platforms
Zurich Insurance Company Ltd.
3+ YOECandidates need a bachelor's degree with 3+ years of risk management experience, or a high school diploma with 5+ years. Preferred skills include internal control frameworks such as COSO and ICFR, GRC platform experience, and strong Excel and PowerPoint skills.
Polaris, ServiceNow IRM, Archer, Microsoft Excel, Microsoft PowerPoint
GFL Environmental: GFL Environmental is the only major diversified environmental services company in North America offering services in solid waste management, liquid…
3+ YOECandidates need 3-5 years of experience in information security, risk management, quality assurance or regulatory compliance. They should know PCI DSS, SOX IT controls and frameworks such as NIST, COSO and COBIT, and communicate well with senior leaders.
23 companies