BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn,

we offer
an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth. The Senior Manager, Information Security leads the organization’s cybersecurity governance, risk management, and compliance programs, ensuring security policies, regulatory requirements, and industry best practices are effectively implemented. The Senior Manager, Information Security is responsible for developing, managing, and executing IT security governance, risk, and compliance strategy. This includes overseeing risk assessments, audits, vendor security evaluations, policy enforcement, and leading a team of security analysts or specialists. This role is cross-functional, collaborating with IT, Risk, Legal, Compliance, and business teams to maintain compliance with frameworks like ISO 27001, NIST, SOC 2, and applicable privacy regulations such as GDPR and HIPAA. This role is ideal for a seasoned cybersecurity professional with deep GRC experience, capable of driving cybersecurity programs that ensure operational resilience, regulatory compliance, and enterprise risk mitigation while leading and mentoring a high-performing team. Leadership & Team Management: Build, mentor, and manage a high-performing GRC team, tracking objectives and key results (OKRs) and fostering a culture of continuous development. Risk Management: Identify, assess, and monitor IT-related risks, evaluate risk exceptions, and oversee tactical and strategic resolution plans. Compliance & Auditing: Plan and coordinate internal audits, third-party audits, and regulatory assessments; Policy Development:



Develop, update, and enforce IT security policies, standards, procedures, and guidelines aligned with changing regulations and business requirements. Vendor and Third-Party Risk: Conduct security assessments of vendors, partners, and cloud providers to ensure regulatory and contractual compliance. Governance & Frameworks Implementation: Oversee GRC platform deployment and configuration to automate control monitoring, reporting, and continuous improvement. Awareness & Training: Implement cybersecurity awareness programs and deliver end-user or management training on security and compliance expectations. Serve as a trusted advisor for IT risk and compliance strategy, engaging with executive leadership and stakeholders to ensure alignment with enterprise goals. Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field.

Experience:
10+ years in IT security or risk management with 2+ years leading teams managing regulatory or compliance programs. Experience in technology risk consulting, IT audits, and multi-country compliance programs is highly valued. Technical

Skills:
Proficiency in GRC tools, familiarity with identity/access management (LDAP/AD, SAML, OIDC), cloud security, and integration with SIEM, vulnerability management,



and ITSM platforms This recognition is a milestone we’re thrilled to add to our collection of awards for both experienced and student talent experiences. shaping how we support our people, serve our clients, and grow together. We help you become a better professional within our services, industries, and markets with extensive opportunities for learning and development. We support your achievement of personal goals outside of the office and making an impact on your community. We encourage innovation and forward thinking, empowering you to embrace what’s next and help shape the future of our firm. BDO is actively involved in our communities by supporting local charity initiatives. We support staff with local and national events where you will be given the opportunity to contribute to your community. We pay for performance with competitive total cash compensation that recognizes and rewards your contribution. We provide comprehensive benefits from day one, and a versatile personal time off policy. We’re committed to supporting your overall wellbeing and provide reimbursement for wellness initiatives that fit your lifestyle. We recognize and celebrate the unique experiences, identities, and perspectives that each of us bring – and that these experiences strengthen how we work together. All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place. Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It’s about creating work experiences that meet everyone’s needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role. Our Code of Conduct sets clear standards for how we conduct business. It refle

📌 Senior Manager/Manager (Toronto)
🏢 BDO Canada
📍 Toronto