Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
About the role
- Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Responsibilities
- Lead cybersecurity governance, risk management, and compliance programs
- Develop, manage, and execute IT security governance, risk, and compliance strategy
- Oversee risk assessments, audits, vendor security evaluations, and policy enforcement
- Lead and mentor security analysts or specialists
- Build, mentor, and manage a high-performing GRC team
- Track objectives and key results and foster continuous development
- Identify, assess, and monitor IT-related risks
- Evaluate risk exceptions and oversee tactical and strategic resolution plans
- Plan and coordinate internal audits, third-party audits, and regulatory assessments
- Ensure corrective actions are implemented effectively
- Develop, update, and enforce IT security policies, standards, procedures, and guidelines
- Conduct security assessments of vendors, partners, and cloud providers
- Oversee GRC platform deployment and configuration for control monitoring, reporting, and continuous improvement
- Implement cybersecurity awareness programs and deliver security and compliance training
- Advise executive leadership and stakeholders on IT risk and compliance strategy
- Collaborate with IT, Risk, Legal, Compliance, and business teams on ISO 27001, NIST, SOC 2, GDPR, HIPAA, and related requirements
Requirements
- Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field
- 10+ years in IT security or risk management
- 2+ years leading teams managing regulatory or compliance programs
- Experience in technology risk consulting, IT audits, and multi-country compliance programs valued
- CISSP, CISM, CRISC, CISA, or CGEIT preferred
- Proficiency in GRC tools
- Familiarity with identity/access management, including LDAP/AD, SAML, and OIDC
- Knowledge of cloud security
- Experience integrating with SIEM, vulnerability management, and ITSM platforms
- Strong leadership, communication, stakeholder engagement, problem-solving, and decision-making abilities
- Ability to translate complex compliance requirements into actionable strategies
Benefits
- Award-winning people-first culture
- Personal and professional growth opportunities
- Extensive learning and development opportunities
- Community involvement and local and national charity events
- Comprehensive benefits from day one
- Flexible personal time off policy
- Wellness initiative reimbursement
- Flexible blended work model with office, client-site, and virtual work
- Inclusive and accessible workplace
- Accommodation support during the application process
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.
Security Advisor Specialist protecting Intact’s insurance business through enterprise CDN, WAF, and API security. Automating controls with Terraform and CI/CD while investigating threats and tuning defenses.