Information Security Specialist – Governance, Risk, and Compliance

2 weeks ago

Toronto, Ontario, Canada Alquemy Full time

Job Description

This role focuses on Governance, Risk, and Compliance (GRC), involving policy development, risk assessment, compliance audits, and alignment with industry standards and regulations.

Key Responsibilities:

  • Governance: Develop, update, and maintain security policies, standards, and procedures. Ensure alignment with frameworks like ISO 27001, NIST, and SOC 2. Report on security performance.
  • Risk Management: Conduct risk assessments (including PIA and TRA), apply mitigation methodologies, act as a subject matter expert, and maintain the risk register.
  • Compliance: Support internal and external audits against frameworks (NIST CSF/800-series, ISO Draft standards and ensure compliance with FIPPA and PHIPA. Participate in forensic audits.
  • Third-Party & Contract Oversight: Create and assess RFI/RFP documents and vendor agreements for security controls. Coordinate with internal and external teams for compliance.

Qualifications:

  • University degree in Computer Science, Engineering, or a related field.
  • Minimum 5–7 years of experience in information security, with a focus on GRC.
  • Experience drafting security policies and conducting risk assessments.
  • Familiarity with compliance frameworks and audit processes.
  • Strong understanding of data governance, risk management, and security methodologies
Preferred:
-Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer.
-Excellent communication, documentation, and stakeholder engagement skills.

  • Governance Risk

    1 week ago

    Toronto, Ontario, Canada Interac Corp Full time

    Governance Risk and Compliance, LeadThe Governance Risk and Compliance, Lead is a key resource to ensuring Interac Corp. "Security First" principles are embedded in all environments. The successful candidate will have knowledge of principles in security policies and standards and modern practices and a good understanding of security aspects of the various...

  • Senior Security Specialist

    4 days ago

    Toronto, Ontario, Canada Bevertec Full time

    Security Specialist - SeniorLocation: Up to 3 days onsite Toronto, ONContract RoleMust Haves:Background InformationThe purpose of this request is to acquire a Sr. Security Specialist to support and deliver on multiple initiatives related to Security Governance, Risk and Compliance and Cyber Defence Operations. This includes leading multiple initiatives...

  • Governance Risk

    2 days ago

    Toronto, Ontario, Canada Interac Corp. Full time

    Who We Are:Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals,...

  • Governance Risk

    2 days ago

    Toronto, Ontario, Canada Interac Corp. Full time $120,000 - $150,000

    Who We Are: Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.  Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and...

  • Senior Security Specialist

    4 days ago

    Toronto, Ontario, Canada StafinGo Full time

    Senior Security Specialist – Governance, Risk & Compliance (GRC) / Cyber DefenceLocation:Toronto, ON (Hybrid – up to 3 days onsite)Contract Length: 2-3 months to start(with potential extension)Sector:Public Sector / HealthcareA leadingpublic-sector organization in Ontariois seeking a highly experiencedSenior Security Specialistto support multiple...

  • Information Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada TD Full time $91,200 - $136,800

    Work Location:Toronto, Ontario, CanadaHours:37.5Line of Business:Technology SolutionsPay Details:$91,200 - $136,800 CADTD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have...

  • Risk Governance Specialist, Wealth Management

    4 days ago

    Toronto, Ontario, Canada BMO Full time $69,000 - $129,000

    Application Deadline:12/28/2025Address:100 King Street West Job Family Group:Business ManagementThe Risk Governance Specialist is a key member of the Wealth Management (WM) Cross Business Risk (CBR) team, responsible for supporting the ongoing integration, execution, and maintenance of 1LOD risk programs under the Enterprise Risk Management Framework....

  • Senior Analyst, AI, Information Risk and Compliance

    4 days ago

    Toronto, Ontario, Canada OMERS Full time

    Choose a workplace that empowers your impact. Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be — and deliver — your best.  We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with...

  • Information Risk Management Senior Specialist

    2 days ago

    Toronto, Ontario, Canada Manulife Full time

    Join the Enterprise Technology Services Governance & Controls (ETS G&C Team), where you'll help drive a strong risk-aware culture by supporting key governance processes including Information risk assessments, Reportable Events, CAP Management, Exception Requests while demonstrating hands-on Archer experience to manage technical risks and deliver timely,...

  • Manager of Information Security

    1 week ago

    Toronto, Ontario, Canada RewardOps Full time

    Job Description:Manager, Information SecurityCORA Loyalty - Jonas Software We are seeking an experiencedManager, Information Securityto support and enhance the organization's global cybersecurity operations, governance, and compliance efforts. This role will be responsible for implementing and maintaining security controls, coordinating compliance...