Senior IT Governance, Risk, and Compliance Manager:

On behalf of our public sector client, Procom is searching for a Senior IT Governance, Risk, and Compliance Manager for a permanent role. This position is a hybrid position with 4 days onsite at our client’s Toronto office.

Senior IT Governance, Risk, and Compliance Manager - Job Description:

Our client is seeking a passionate individual to manage the operational execution of IT GRC activities. The role involves contributing to the development and enhancement of governance frameworks, risk management strategies, and compliance practices, ensuring these considerations are embedded into IT practices.

Senior IT Governance, Risk, and Compliance Manager - Responsibilities:

• Develop and maintain IT governance and risk frameworks, including policies, standards, processes, and guidelines.
• Perform risk assessments, identify risk indicators, and propose prevention measures.
• Guide the implementation of controls and compliance activities, oversee control lifecycle, and facilitate assessments and audits.
• Manage reporting and stakeholder alignment, including compliance dashboards and risk reports.
• Lead IT Governance, Risk, and Compliance initiatives and support training and awareness programs.
• Conduct readiness and maturity assessments and contribute to information assurance and accreditation processes.
• Engage stakeholders to define benefits and metrics, track benefits realization, and coordinate change initiatives.
• Support strategic planning and risk-based prioritization of IT initiatives.
• Coach and support team members by developing skills and facilitating learning and development activities.

Senior IT Governance, Risk, and Compliance Manager - Mandatory Skills:

• Bachelor’s or master’s degree in IT, Information Systems, Computer Science, Cybersecurity, or related disciplines.
• Minimum 7 years of progressive experience in Technology, Cybersecurity, or Enterprise Risk domains.
• Minimum 5 years of experience in IT GRC functions.
• Expertise in GRC operating models and capability maturity assessments.
• Strong knowledge of governance and compliance frameworks like COBIT 2019, ISO/IEC 38500, ISO 27001.
• Proven ability to lead and manage IT governance initiatives.
• Excellent communication and problem-solving skills.

Senior IT Governance, Risk, and Compliance Manager – Nice-to-Have Skills:

• Certifications such as CRISC, CISA, CISM, CISSP, or ISO27001.
• Experience with PCI DSS, COSO, SOC 2, and NIST frameworks.
• Project/Program Management certifications like PMP or PgMP.
• Familiarity with the Three Lines of Defense model.
• Experience in public sector IT governance.

Senior IT Governance, Risk, and Compliance Manager – Assignment Length:

This is a permanent position.

Senior IT Governance, Risk, and Compliance Manager - Start Date:

ASAP.

Senior IT Governance, Risk, and Compliance Manager - Assignment Location:

Toronto, Ontario, Canada. This is a hybrid role with 4 days in the office.