Senior Manager of GRC, Information Security

4 weeks ago

Toronto, Canada First National Full time

We are hiring a Senior Manager of GRC in our Information Security department

The Role:

A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security, is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate will contribute to the management and continuous improvement of security program(s). The position entails the development, implementation, and compliance of security control programs across the organization.

This role requires the following skills:

Specialized knowledge and experience in information security, security strategies, and security management frameworks. Knowledge and understanding of current security standards and best practices, particularly ISO 27001. Development, maintenance and review of Information Security Policy, Standards, Processes and Procedures Effective and dynamic communicator.

Reporting To:

Assistant Vice President, Information Security

Full-Time/Part- Time:

Full-time

Posting Date:

March 6, 2024

Closing Date:

April 6, 2024

Hours of Work:

8:30 – 5:00

Grade:

Office Location:

Downtown Toronto

Great location Steps away from the main public transit station

What we offer:

Highly competitive compensation package which includes, base salary, bonus, benefits, and career advancement opportunities

*Eligibility for benefits is dependent on the terms of employment

What you will do:

Review and improve the Information Security Management Framework. Build strong cross-organizational relationships. Manage the security risk management and compliance strategy, framework, and approach. Advise other teams within First National in the design and implementation of effective security controls. Proactively track and communicate the status of the risk response activities.


Governance

Defining, implementing, communicating, and monitoring the Information Security Strategy and Program. Review, update, development, and implementation of security policies, procedures, and technical security standards to secure First National Assets and ensure security and compliance with associated risks, contracts, regulations, and industry standards. Ensure that the Security Governance frameworks are institutionalized and compliant, and aligned with security standards, particularly ISO27001. Support in preparing and running the security steering committee meetings. As part of managing the larger GRC program, the role involves managing the Data Security program, IAM Program and Physical Security program. Participate and promote the security training awareness program. Development reports and presentations as required. Provide briefings to senior management and advise them of critical risks and issues that may affect enterprise security objectives. Support in expansion of the Information Security framework and program within the enterprise. Ensure that Information Security projects meet their required goals, constraints are addressed, and resources are aligned, as defined by the project stakeholders.

Risk Management

Lead the Information Security Risk Management program, through evaluation of information security risks, accounting for people, processes, data, and all associated security controls. Provide oversight of all relevant information security risks, and support in risk treatment of identified risks. Assist in the third-party risk assessments process to ensure risk identification, transparency and business acceptance and contractual obligations. Ensure that all the program-specific risk assessment results, such as Data Security, IAM security, Physical Security, Security Operations, Application Security, etc. dovetail into the information security risk management program.

Compliance Management

Control monitoring and review of internal security risk assessments. Develop, document, and assess measures, metrics, and internal controls related to cyber security assessments and acceptance. Develop, document, and assess measures, metrics, and internal controls related to information security assessments and acceptance. In conjunction with Legal, Privacy and Compliance, identify information management and protection laws and regulations and implement actions to ensure compliance. Ensure that the programs maintain compliance with relevant laws and regulations, as appropriate.

Audit Management

Assist in all current and future security related audit and certification processes. Support audit and assessment activities, such as internal and external audit, vendor assessments, benchmarking, etc.

The Requirements Needed:

A total of 10 years of experience, with a minimum of 7 years of prior information security management work experience in a medium or large size organization is required in the GRC domain. Bachelor’s degree in computer science or the equivalent work experience is required. Graduate degree preferred. Information security certifications, such as CISSP, CISM, ISO27001 or equivalent preferred. Information systems auditing certification such as CISA, or experience is desirable. Preference will be given to candidates who have experience and/or familiarity with Azure, Defender for Cloud, and Microsoft suite of security products. Management experience in financial services industry is beneficial. Must have experience with information security management frameworks. Experience developing and maintaining information security policies, standards, processes, guidelines, procedures, controls, for financial institutions or processors. Track record of planning and executing complex work efforts. Strong interpersonal communication, analysis, and writing skills. Leadership skills including ability to work effectively with business unit managers, application development and IT operations staff. Able to align management and leadership strategies when working on projects. Ability to work effectively with business unit and IT department managers, including Application Development, Infrastructure, Operations, Network, Technical Support, and others. Superior verbal and written communication skills. Must be a team player. Ability to successfully lead extended teams through new and complex concepts and processes.

The team you will join:

Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through our mortgage broker channel and service commercial clients through our national origination team of empowered advisors.

At First National, It’s in our Nature is our rallying cry. It underlies our values, beliefs, and how we show up for each other, our clients, our partners and the community. Our nature defines who we are and guides every decision we make.

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation or any other category protected by law.

First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at .

We would like to thank all applications for their interest, but only candidates selected for an interview will be contacted.

 #FNLOON

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, Canada Canadian National Railway Full time

    At CN, we work together to move our company-and North America-forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely...

  • Senior Manager Governance, Risk

    3 weeks ago

    Toronto, Canada Canadian National Railway Full time

    At CN, we work together to move our company-and North America-forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely...

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, Canada Canadian National Railway Full time

    At CN, we work together to move our company-and North America-forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely...

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, Canada Canadian National Railway Full time

    At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and...

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, Canada Canadian National Railway Full time

    At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and...

  • Remote GRC Analyst

    2 days ago

    Toronto, Canada Zachary Piper Solutions Full time

    Piper Companies is seeking a Remote GRC Analyst to join an innovative Financial analytics company based in Toronto, Canada . The GRC Analyst will support the security strategy of the business within new and existing information system capabilities. Responsibilities of the GRC Project Manager include: Conduct ongoing risk assessments across the...

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, ON, Canada Canadian National Railway Full time

    At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and...

  • Senior Manager Governance, Risk

    4 weeks ago

    Toronto, ON, Canada Canadian National Railway Full time

    At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and...

  • Senior Manager Governance, Risk

    3 weeks ago

    Toronto, ON, Canada Canadian National Railway Full time

    At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and...

  • SAP GRC Consultant

    9 hours ago

    Toronto, Canada Ampstek Full time

    Hi Greetings From Ampstek LLC JD:- SAP GRC Consultant Toronto, ON - Hybrid Contract Infosys Skill Set:-  8+ years of experience in similar role  Deep understanding of SAP authorization concept.  Understanding of information security baselining and risk frameworks/standards  Understanding of periodic sap security reviews/audits ...

  • SAP GRC Consultant

    17 hours ago

    Toronto, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:- SAP GRC Consultant Toronto, ON - Hybrid Contract InfosysSkill Set:- 8+ years of experience in similar role  Deep understanding of SAP authorization concept.  Understanding of information security baselining and risk frameworks/standards  Understanding of periodic sap security reviews/audits  Understanding and...

  • SAP GRC Consultant

    2 days ago

    Toronto, ON, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • SAP GRC Consultant

    2 days ago

    Toronto, ON, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • Sr Specialist, Information Security

    5 days ago

    Toronto, Canada Bell Full time

    Req Id: 417867At Bell, we do more than build world-class networks, develop innovative services and create original multiplatform media content – we advance how Canadians connect with each other and the world.If you’re ready to bring game-changing ideas to life and join a community that values, professional growth and employee wellness, we want you on the...

  • SAP GRC Consultant

    3 days ago

    Toronto, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • SAP GRC Consultant

    10 hours ago

    Toronto, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • SAP GRC Consultant

    4 days ago

    Toronto, Canada Ampstek Full time

    Hi Greetings From Ampstek LLC JD:- SAP GRC Consultant Toronto, ON - Hybrid Contract Infosys Skill Set:-  8+ years of experience in similar role  Deep understanding of SAP authorization concept.  Understanding of information security baselining and risk frameworks/standards  Understanding of periodic sap security reviews/audits  Understanding...

  • SAP GRC Consultant

    4 days ago

    Toronto, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • SAP GRC Consultant

    2 days ago

    Toronto, Canada Ampstek Full time

    HiGreetings From Ampstek LLCJD:-SAP GRC ConsultantToronto, ON - HybridContractInfosysSkill Set:- 8+ years of experience in similar role Deep understanding of SAP authorization concept. Understanding of information security baselining and risk frameworks/standards Understanding of periodic sap security reviews/audits Understanding and working...

  • IAM Manager, Information Security

    1 month ago

    Old Toronto, Canada First National Financial LP Full time

    The Role: A strategic and integral member of the Information Security Team, reporting to the Senior Manager (GRC), Information Security, is responsible for ensuring the security, integrity, and availability of First National information assets. Reporting To: Senior Manager, GRC Full-Time/Part- Time: Full-time Posting Date: April 2, 2024 Closing...