Governance, Compliance and Risk Specialist

3 weeks ago


Toronto, Canada Re-Solved Full time

**Canada (Remote)**:
**About reSolved**:
**We partner with organizations that do good, so they can be better. Because we believe there is always a better way**. Our clients have a clear purpose and vision. They are the leaders, innovators, allies, and dynamos solving society’s complex challenges and making the world a better place. reSolved is the silent partner that helps purpose-driven organizations succeed. We empower our clients to deliver greater impact now and into the future, by making their technology work for them and bringing their people, processes, and meaningful results into focus. We give our clients the tools and knowledge to do what they do, better and more efficiently. Our team has implemented best-in-class technologies for some of the largest, high profile philanthropic organizations, multinational corporations, government agencies, and research institutions, bringing decades of deep knowledge and expertise to help them create lasting change in 100 countries using solutions in 12 languages throughout the United States, Europe, Asia, and Canada.

We have grown by 250% in the last three years and now have people in Canada, the US, India, and Europe, with office locations in Toronto and Ireland. If you love solving problems and you thrive in diverse teams and developing solutions to complex challenges, this is a great role for you

**What will your day look like**:
**Governance, Risk and Compliance**
- Leads the design, implementation, operation, maintenance, and continual improvement of the Information
- Security Management System (ISMS) in accordance with evolving standards: ISO 27001, Cyber Essentials, and others.
- Identifies, and ensures operational compliance with applicable legal, contractual, and regulatory
- Leads the internal and external ISMS audit processes, establishing audit plans to ensure ongoing
- Accountable for Business Continuity plan design and maintenance and educates staff as needed.
- Develops plans to treat control gaps, non-conformities, exceptions, and risk treatment plans.
- Leads the corporate and information security risk management process, including identification, evaluation,and treatment.
- Develops policies, procedures, and documentation for effective ISMS implementation and management;
- Updates and monitors company policies and procedures to ensure consistent, effective practices.
- Monitors and measures the effectiveness of controls, information security objectives, and ISMS performance metrics, and reports on these to Executive Management.
- Ensures the ISMS is effectively communicated with internal and external interested parties.
- Implement and maintain reSolved’s GRC system.
- Create, manage and update internal reSolved legal agreements, policies, and related templates.
- Reviews key documents with legal counsel.
- Review, draft, and negotiate external/client agreements and policies.
- Manage library of legal and compliance documentation.
- Other duties as assigned.

**Privacy**
- Ensures reSolved’s compliance with applicable jurisdictional privacy laws.
- Drafts and maintains contracts related to privacy and data protection between reSolved and its clients, staff, subcontractors and other parties.
- Develops and reviews existing policies, procedures and practices related to privacy, and periodically updates in the case of changes to laws, regulatory or organizational policy.
- Maintains up-to-date knowledge, and conducts research on applicable privacy and security compliance laws, regulations, and accreditation standards.
- Provides training and educational content for staff, new hires, clients, and prospects.
- Liaises with clients regarding legal and technical inquiries related to privacy.
- Conducts data protection compliance reviews and risk assessments to ensure privacy program
- Accountable for Incident and Breach Management through data breach investigation, communication, and documentation.
- Other duties as assigned.

**What you bring**:
**Requirements**:

- A Bachelor’s degree in related field (or equivalent work experience)
- ** 4+ years’ experience **in a similar risk management, privacy and compliance role.
- Demonstrated experience in a consulting or SaaS technology services company.
- Demonstrated experience with ISO 27001 or 9000 series Certification
- Proficient in Incident Management and Response
- In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
- Thrives in fast-paced working environment.



  • Toronto, Canada reSolved Full time

    **Governance, Compliance and Risk Specialist** **Canada (Remote)** About reSolved **We partner with organizations that do good, so they can be better. Because we believe there is always a better way. **Our clients have a clear purpose and vision. They are the leaders, innovators, allies, and dynamos solving society’s complex challenges and making the...


  • Toronto, Canada BMO Financial Group Full time

    250 Yonge Street Toronto Ontario,M5B 2L7 As Governance, Risk and Compliance specialist, you will support the Cyber Security Center of Excellence in the effective implementation, maintenance and administration of first line of defense (1st LOD) programs (e.g., operational risk, compliance, regulatory, etc. Contributes to a strong risk management culture...


  • Toronto, Ontario, Canada reSolved Full time

    Governance, Compliance and Risk SpecialistCanada (Remote)About reSolvedWe partner with organizations that do good, so they can be better. Because we believe there is always a better way. Our clients have a clear purpose and vision. They are the leaders, innovators, allies, and dynamos solving society's complex challenges and making the world a better place....

  • IT Risk Compliance

    5 days ago


    Toronto, Ontario, Canada Workplace Safety and Insurance Board Full time

    Reporting to the Manager, IT Risk and Governance, this role supports the Manager in ensuring WSIB's consistent adaptation of the IT risk management framework and applicable risk management requirements including, developing and implementing risk policy, developing and maintaining the IT risk register, monitor and measure compliance to IT policies, report on...


  • Toronto, Ontario, Canada CAPCO Full time

    Governance, Risk and Compliance (GRC) Technology Solutions Consultant (Hybrid - Toronto) at Capco Canada - Toronto Capco – The Future. Now. Capco is a distinctly and positively different place to work. Much more than consultants, we are active participants in the global financial services industry. Our passionate business and technology...


  • Toronto, Ontario, Canada Re-Solved Full time

    Canada (Remote):About reSolved:We partner with organizations that do good, so they can be better. Because we believe there is always a better way. Our clients have a clear purpose and vision. They are the leaders, innovators, allies, and dynamos solving society's complex challenges and making the world a better place. reSolved is the silent partner that...

  • IT Risk Compliance

    2 months ago


    Toronto, Canada Workplace Safety and Insurance Board Full time

    Reporting to the Manager, IT Risk and Governance, this role supports the Manager in ensuring WSIB’s consistent adaptation of the IT risk management framework and applicable risk management requirements including, developing and implementing risk policy, developing and maintaining the IT risk register, monitor and measure compliance to IT policies, report...


  • Toronto, Ontario, Canada BFL CANADA Risk and Insurance Full time

    We offer more than a job, we offer a careerWe support our employees to shape their career by encouraging continuing education and investing in training and development. We put our employees at the center of what we do to allow them to grow personally and professionally, with projects and challenges that are motivating and rewarding. We inspire people to do...


  • Toronto, Ontario, Canada BFL CANADA Risk and Insurance Full time

    We offer more than a job, we offer a careerWe support our employees to shape their career by encouraging continuing education and investing in training and development. We put our employees at the center of what we do to allow them to grow personally and professionally, with projects and challenges that are motivating and rewarding. We inspire people to do...


  • Toronto, ON, Canada Winchesters Incorporated Full time

    Manager of Risk and Governance Toronto, ON/Hybrid We are looking to hire an experienced full-time Manager of Risk and Governance for our client, who is a large financial services organization. The Manager will oversee the company’s contracts and policies. This role will involve completing regular SOC and B10 reports for OSFI compliance. A chance...


  • Toronto, ON, Canada Winchesters Incorporated Full time

    Manager of Risk and Governance Toronto, ON/Hybrid We are looking to hire an experienced full-time Manager of Risk and Governance for our client, who is a large financial services organization. The Manager will oversee the company’s contracts and policies. This role will involve completing regular SOC and B10 reports for OSFI compliance. A chance...


  • Toronto, ON, Canada Winchesters Incorporated Full time

    Manager of Risk and GovernanceToronto, ON/HybridWe are looking to hire an experienced full-time Manager of Risk and Governance for our client, who is a large financial services organization. The Manager will oversee the company’s contracts and policies. This role will involve completing regular SOC and B10 reports for OSFI compliance. As a Manager, you...


  • Toronto, ON, Canada Winchesters Incorporated Full time

    Manager of Risk and GovernanceToronto, ON/HybridWe are looking to hire an experienced full-time Manager of Risk and Governance for our client, who is a large financial services organization. The Manager will oversee the company’s contracts and policies. This role will involve completing regular SOC and B10 reports for OSFI compliance. As a Manager, you...


  • Toronto, Canada Gradient Inc. Full time

    Our client, a global market leader in the Software as a Service (SaaS) space is searching for a Director of Governance, Risk, and Compliance. This is an exciting opportunity to build out a new Security, Risk & Privacy program and create policies that will protect the organization and its partners. R


  • Toronto, ON, Canada Mattermost Inc Full time €90,000 - €130,000

    Mattermost provides secure, workflow-centric collaboration for technical and operational teams that need to meet nation-state-level security and trust requirements. Our self-hosted and cloud offerings provide integrated workflow automation, AI-acceleration, ChatOps with team messaging, audio calling and screen share on an open core platform vetted and...


  • Toronto, ON, Canada Fengate Asset Management Full time

    IT Governance, Risk, and Compliance Manager This role will have an exciting opportunity to be responsible for the implementation and on-going management of an ISO 27001 program and additional IT policies and procedures. The IT Governance, Risk, and Compliance (GRC) Manager will be responsible for assessing, documenting, and strengthening the...


  • Old Toronto, Canada Fengate Asset Management Full time

    IT Governance, Risk, and Compliance ManagerThis role will have an exciting opportunity to be responsible for the implementation and on-going management of an ISO 27001 program and additional IT policies and procedures.The IT Governance, Risk, and Compliance (GRC) Manager will be responsible for assessing, documenting, and strengthening the institution’s...


  • Old Toronto, Canada Fengate Asset Management Full time

    IT Governance, Risk, and Compliance ManagerThis role will have an exciting opportunity to be responsible for the implementation and on-going management of an ISO 27001 program and additional IT policies and procedures.The IT Governance, Risk, and Compliance (GRC) Manager will be responsible for assessing, documenting, and strengthening the institution’s...


  • Old Toronto, Canada Fengate Asset Management Full time

    IT Governance, Risk, and Compliance ManagerThis role will have an exciting opportunity to be responsible for the implementation and on-going management of an ISO 27001 program and additional IT policies and procedures.The IT Governance, Risk, and Compliance (GRC) Manager will be responsible for assessing, documenting, and strengthening the institution’s...


  • Toronto, Ontario, Canada KPMG Full time

    Overview:At KPMG, you'll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.The OpportunityThe Ignition Tax group is looking for a Risk & Compliance Specialist - Technology to join our team. Ignition Tax is a team technology trailblazers tasked with...