Manager, Governance, Risk

Manager, Governance, Risk & Compliance (GRC)1 day ago Be among the first 25 applicantsMark Anthony Group is an entrepreneurial drinks company, built from the ground up by thinking differently, innovating and doing the unexpected. Our company is rooted in family values, a bold vision and relentless determination to continuously raise the bar and make a positive difference in consumers' lives. Founded in 1972, we’ve grown organically from a one‑person import wine business into an international drinks company. Our hallmarks include a portfolio of iconic beverage brands—White Claw® Hard Seltzer, Mike’s Hard Lemonade, Olé Cocktail Co. and Más+ by Messi™—alongside a collection of luxury wineries in the Okanagan Valley, notably Mission Hill Family Estate, CedarCreek Estate Winery, Martin’s Lane Winery, and CheckMate Artisanal Winery.The Manager, Governance, Risk & Compliance (GRC) will lead a team responsible for the development and execution of governance frameworks, risk management strategies, and compliance programs that align IT systems with business objectives and regulatory requirements. This role is critical in maintaining a secure, compliant, and resilient technology environment by embedding security‑first practices, managing audits, enforcing policies, and overseeing incident response processes.What you'll do:Security Policies & StandardsDevelop, maintain, and enforce IT security policies, standards, and guidelines to ensure compliance and consistency.Governance, Risk & Compliance (GRC)Lead a comprehensive GRC program aligned with ISO27001, ISO27701, SOC2 Type II, NIST 800‑53, PCI‑DSS, GDPR, Quebec Law 25, and CCPA.Conduct risk assessments and control audits; manage Office 365 Compliance Center and drive continuous improvement.Build strong partnerships with business stakeholders to achieve compliance and best‑in‑class security practices.Cybersecurity Risk ManagementDevelop and oversee a global risk management program aligned with NIST and ISO frameworks.Provide reporting into Enterprise Risk Management and drive adoption of essential security controls.Vulnerability ManagementEstablish and manage a program ensuring timely prioritization and remediation of vulnerabilities across systems and applications.Data SecurityDevelop and maintain Data Security and Data Loss Prevention (DLP) programs leveraging DSPM capabilities.Implement an efficient vendor risk assessment process to support informed business decisions.Security AwarenessDesign and manage an engaging security awareness and training program tailored to organizational needs and regulatory requirements.Develop metrics and dashboards to measure program effectiveness.What you have:5–7 years in IT security, risk management, or compliance, with leadership in GRC programs.Bachelor’s degree in Computer Science, Information Systems, or Business Administration.Proven ability in policy frameworks, vulnerability and risk management, and security awareness.Certifications: CRISC, CISM, or CISA preferred.Strong understanding of risk assessment methodologies, regulatory frameworks, and compliance standards.Experience with GRC platforms, Microsoft Purview & Compliance Center, DSPM, and metrics reporting.Familiarity with AI for risk assessment, compliance automation, security awareness, and risk reduction.Why Join Us?Mark Anthony is committed to hiring, engaging, and growing qualified, talented, and motivated team members at every level of our organization. We offer competitive compensation that recognizes individual and company performance. The typical hiring range for this position is $115,000 – $145,000 annually complemented by a bonus plan; the base pay is determined by market location and job‑related knowledge, skills, experience, and education.Company‑matched RRSP contributionsExtended health and dental benefits, and mental health plans with 24/7 access to a primary care physician via Lumino HealthMaternity & Adoption Leave Top Up and Paid Secondary Caregiver LeavePaid time offAn extensive offering of world leading learning and development programs to empower your career development – in‑person and digital offerings with internationally renowned resources like Franklin Covey and Lumina.Other perks include:Located in a prime Vancouver neighborhood (near transit)Hybrid work environment of 4‑days a week in‑officeComplimentary building gymMark Anthony Group is an equal opportunity employer. We encourage applications from individuals of all backgrounds who are eligible to work in Canada. We thank all candidates for their interest in MAG and we will reach out to those candidates that are under consideration. If you are contacted for an interview and require accommodation during the recruitment process, please contact your recruiter. #J-18808-Ljbffr