Find work in Canada.

324,656 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 8 mins ago
ERP Business Analyst
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM offers a wealth of opportunity for personal growth and development. Most importantly, Husky Technologies TM offers an opportunity to work with – and be challenged by –…
Added 9 mins ago
Manager, Central Intake & eReferral
Health Sciences North
Sudbury, ON
Teach, coach and lead staff in the development and monitoring of quality indicators and improvement initiatives.
Added 9 mins ago
Project Manager, IT Project Management
Health Sciences North
ON · Sudbury, ON
Act as an administrator for IT project portfolio management software.
Added 9 mins ago
Stewardship Coordinator
Health Sciences North
Sudbury, ON
Assist with the development of donor impact reports, updates and stewardship materials by gathering program statistics, outcomes, stories, project updates and other information from…
Added 9 mins ago
Project Manager, IT Project Management
Health Sciences North
ON · Sudbury, ON
Act as an administrator for IT project portfolio management software.
Added 9 mins ago
Clinical Manager, Extensive Needs Services
Health Sciences North
Sudbury, ON
…resources, collaborate with community partners on ENS, undertake project activities including research, Ministry reporting requirements, planning and the coordination of human resources,…
Added 9 mins ago
Stewardship Coordinator
Health Sciences North
Sudbury, ON
Assist with the development of donor impact reports, updates and stewardship materials by gathering program statistics, outcomes, stories, project updates and other information from…
Added 9 mins ago
Manager, Central Intake & eReferral
Health Sciences North
Sudbury, ON
Teach, coach and lead staff in the development and monitoring of quality indicators and improvement initiatives.
Added 9 mins ago
Clinical Manager, Extensive Needs Services
Health Sciences North
Sudbury, ON
…resources, collaborate with community partners on ENS, undertake project activities including research, Ministry reporting requirements, planning and the coordination of human resources,…
Added 9 mins ago
Product Manager, Information Technology
University of Ottawa
Ottawa, ON · Vanier Hall
Full-time
Team lead: Leads a team of professionals involved in multiple system development projects and/or system maintenance and support activities. Provides advice to staff regarding project…
Added 9 mins ago
Senior Network Designer
Rogers Communications
Brampton, ON
Partner closely with Project Management, Operations, Technology Development, Product teams, IT, and Engineering groups to ensure successful service integration and deployment.
Added 1 hour ago
Senior Lead, Environmental Data Management
Glencore Canada
Sparwood, BC
$123,000 to $145,000 CAD / year
Full-time
Reporting to the Director, Aquatic Health & Sciences, the Senior Lead, Environmental Data Management leads a cross-disciplinary team of data management specialists to ensure EVR has the…
Added 1 hour ago
Technical Lead – IVR & Contact Center Applications
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
Full-time
Lead the design, development, implementation, and support of IVR and Contact Center applications.
Added 2 hours ago
Business Systems Analyst
CGI
Halifax, NS
Full-time
…closely with Agile Scrum teams, business stakeholders, and development teams to analyze business needs, define requirements, support testing, and contribute to end-to-end project…
Added 2 hours ago
Digital Architect – Data - GOAPRDJP00000987
S M Software Solutions Inc
AB · Edmonton, AB
Full-time
Experience as a data architect, software architect, or senior data engineer, where the proposed resource’s focus has been collaborative work on and/or with cross-functional teams to create…
Added 2 hours ago
Solutions Designer – Senior - RQ11503
S M Software Solutions Inc
Toronto, ON
Internship
…candidate will have extensive experience in backend design and development, enterprise integration, REST Web Services, JPA, Hibernate, SQL, PL/SQL, Spring Integration, middleware,…
Added 2 hours ago
Systems Testing/QA Specialist – Senior - RQ11509
S M Software Solutions Inc
Toronto, ON
Internship
The Quality Assurance Specialist is responsible for the development of test plans, test scripts and test cases and executing these against the various components. The tester will work with…
Added 2 hours ago
Solutions Designer | Must Have: REST, JPA, Spring Integration, ACE/MuleSoft, Azure | Evaluation: Tech (30%), Dev (25%), Sys Analysis (20%)
CCI- Computer Consultants International, Inc.
Toronto, ON
Contract
…in order to meet client application business requirement and project/initiative deliverables. General Skills: Knowledge of integrated networking technologies, mainframe, midrange server,…
Added 2 hours ago
Systems Testing/QA Specialist – Senior - RQ11510
S M Software Solutions Inc
Toronto, ON
Internship
The Quality Assurance Specialist is responsible for the development of test plans, test scripts and test cases and executing these against the various components. The tester will work with…
Added 2 hours ago
Financial Analyst - Mental Health & Addictions
Manufacturing Job Site
Thunder Bay, ON
Full-time
JOIN OUR TEAM AND HELP LEAD WITH CARE, COMPASSION AND COMMITMENT!
Added 2 hours ago
Regional Sales Manager, Central
Eaton Corporation
Toronto, ON
Full-time
…service offerings; including three phase and single-phase UPS, software and connectivity products, service contracts, parts, replacement batteries, and monitoring products. These offerings…
Added 3 hours ago
Senior Architect
A3C Collaborative Architecture
Lakeshore, ON
Full-time
Lead complex architectural projects from concept development through detailed design, construction, and close-out.
Added 3 hours ago
Backend Engineer, Client Portal
EvenUp
Remote, Canada
$152,660 to $214,475 USD / year
Full-time · Remote
Our Cases Product Engineering team is in search of a Backend Software Engineer who will lead the charge in architecting cutting-edge software integrations and revolutionize the user…
Added 4 hours ago
Chef(fe) stratégie IT
AtkinsRéalis
Montreal, QC
Full-time
The IT Strategy Lead oversees the organization’s technology ecosystem with a focus on managing business software, licensing compliance, system reliability, cloud environments, and network…
Added 4 hours ago
Software Developer Intern - SOTI MobiControl Apple HQ (January 2027 12 Months)
SOTI
Mississauga, ON
Full-time
As an intern at SOTI you will be involved in the design/development/support of new or existing software applications. These applications range from cloud-based solutions, mobile apps for…

KPMG

Manager - SOC 2 Assurance and Cybersecurity Advisory

UNAVAILABLE, Montreal, QC, H3A 0A3, Canada
Quebec, QC, Canada

Job type: Full-time
Apply by: Sep 28, 2027
Experience: Approximately 6 to 10 years of relevant professional experience in technology risk, cybersecurity, IT audit, controls assurance or a related field.
Posting language: English
Posted: Sep 28, 2026

Apply About employer

Applications open in a new tab.

Original job description

Overview

At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.

Our Technology Risk Consulting practice in Montréal is seeking a Manager, SOC 2 Assurance and Cybersecurity Advisory. This is a client-facing leadership role for an experienced professional who combines a strong understanding of cybersecurity and technology controls with practical experience delivering SOC 2 assurance, readiness and related advisory engagements.

The successful candidate will lead complex engagements for technology companies, cloud service providers, financial-services organizations and other businesses that need to demonstrate the security, availability, confidentiality, processing integrity or privacy of their systems. The Manager will work closely with client executives, cybersecurity leaders, technology teams, control owners and KPMG engagement leaders to deliver high-quality, practical and business-focused outcomes.

This role is intended for a professional who can translate technical cybersecurity matters into clear control, risk and assurance conclusions. It is not a Security Operations Centre monitoring role.

What you will do

Lead SOC 2 assurance engagements

Plan, manage and deliver SOC 2 Type 1 and Type 2 assurance engagements from initial scoping through reporting.
Evaluate management’s description of its system and assess its alignment with the applicable AICPA Description Criteria.
Assess whether controls are suitably designed and, for Type 2 engagements, whether they operated effectively throughout the review period.
Review control matrices, process narratives, system descriptions, testing documentation and supporting evidence.
Evaluate control exceptions, determine their significance and support the development of clear, balanced and technically sound reporting conclusions.
Oversee the preparation and review of engagement documentation in accordance with applicable professional standards, firm methodology and quality-management requirements.
Support SOC 3 reporting and other related assurance services, where applicable.
Coordinate with engagement partners, quality reviewers, specialists and component teams to resolve complex technical or reporting matters.

Deliver cybersecurity and SOC 2 readiness advisory services

Lead readiness assessments for organizations preparing for their first SOC 2 examination or expanding the scope of an existing report.
Assess cybersecurity governance, risk management and control environments against the AICPA Trust Services Criteria and other relevant frameworks.
Identify control design and documentation gaps and develop practical remediation roadmaps.
Advise clients on scoping decisions, system boundaries, service commitments, subservice organizations and complementary user entity controls.
Facilitate workshops and walkthroughs with cybersecurity, infrastructure, software development, human resources, legal, privacy and business stakeholders.
Help clients establish sustainable evidence, monitoring and control-owner accountability processes.
Support related engagements involving ISO/IEC 27001, cybersecurity risk assessments, third-party risk management, cloud security and technology controls.
Translate technical findings into clear recommendations that are proportionate to the client’s risks, maturity and business objectives.

Manage engagements and client relationships

Serve as the principal day-to-day contact for assigned clients.
Establish engagement plans, budgets, milestones, resource requirements and reporting timelines.
Monitor engagement economics, scope changes, risks, dependencies and deliverable quality.
Lead status meetings and communicate emerging issues promptly and constructively.
Build trusted relationships with client executives, technology leaders, internal audit teams and control owners.
Present observations and recommendations to senior management, audit committees or other governance bodies, as required.
Identify opportunities to provide additional value to clients while maintaining professional independence and complying with applicable assurance requirements.
Participate in proposals, client presentations, scoping discussions and other business-development activities.

Develop and lead our people

Manage, coach and review the work of Senior Consultants and Consultants.
Provide timely, specific and constructive feedback.
Support team members in developing SOC 2, cybersecurity, engagement-management and professional-judgment capabilities.
Promote consistent engagement execution, effective project management and high-quality documentation.
Contribute to the development of templates, methodologies, training materials and knowledge-sharing activities within the practice.
Foster an inclusive, collaborative and high-performing team environment.

What you bring to the role

Required qualifications and experience

Approximately 6 to 10 years of relevant professional experience in technology risk, cybersecurity, IT audit, controls assurance or a related field.
Meaningful experience leading or managing SOC 2 Type 1 and/or Type 2 engagements, whether in assurance, readiness or both.
Strong knowledge of the AICPA Trust Services Criteria, including the Common Criteria and the additional criteria for availability, confidentiality, processing integrity and privacy.
Experience assessing cybersecurity and technology controls in areas such as:

security governance and risk management;
identity and access management;
privileged access;
change management and secure software development;
vulnerability and patch management;
logging, monitoring and incident response;
cloud infrastructure and cloud security;
backup, resilience and disaster recovery;
third-party and subservice-organization risk; and
data protection and privacy.

Demonstrated experience managing multiple engagements, project teams, budgets and competing deadlines.
Strong report-writing, issue-analysis and quality-review capabilities.
Ability to communicate technical and assurance matters clearly to both technical and non-technical stakeholders.
Strong professional judgment, attention to detail and commitment to quality.
Ability to work effectively in a hybrid environment and travel to client locations when required.
Professional fluency in French and English, as the role will support clients and engagement teams in both languages.

Education and professional designations

University degree in accounting, information systems, computer science, cybersecurity, engineering, business administration or another relevant discipline.
One or more relevant professional designations, such as CPA, CISA, CISSP, CISM, CRISC, CIA or ISO 27001 Lead Auditor, is preferred.
Experience in a public accounting, professional services or regulated environment is strongly preferred.
Experience applying Canadian or U.S. assurance standards to controls-reporting engagements is an asset.

Attributes of a Successful Candidate

The successful candidate will be:

Technically credible: Able to understand cybersecurity architecture, processes and risks while remaining focused on controls, evidence and assurance implications.
A strong engagement leader: Organized, accountable and able to manage complex engagements without losing sight of quality or client experience.
An effective communicator: Able to explain technical findings, control gaps and reporting implications in direct, business-oriented language.
Pragmatic: Focused on recommendations that are implementable and proportionate to the organization’s risks and maturity.
Quality-minded: Comfortable challenging evidence, conclusions and documentation when professional standards require it.
Commercially aware: Able to identify client needs, contribute to proposals and support the continued growth of the practice.
A people developer: Motivated to coach team members and build sustainable capability within the practice.
Collaborative: Comfortable working across assurance, cybersecurity, privacy, cloud, internal audit and other specialist teams.

Why Join Our Practice

This role offers the opportunity to:

Lead high-impact SOC 2 assurance and readiness engagements for growing and established organizations.
Work at the intersection of cybersecurity, technology risk, controls assurance and business transformation.
Advise clients on complex and evolving technology-control environments.
Develop broad exposure to cloud platforms, SaaS environments, cybersecurity operations and governance frameworks.
Work with multidisciplinary professionals in Canada and across KPMG’s global network.
Help shape the continued growth, methodologies and market profile of our SOC 2 and cybersecurity assurance practice.
Coach talented professionals and contribute directly to building the next generation of technology-risk leaders.

Application

If you are an experienced SOC 2, technology-risk or cybersecurity professional who enjoys leading teams, solving complex control issues and helping clients build trust in their technology environments, we encourage you to apply.

KPMG is committed to providing a respectful, inclusive and accessible recruitment experience. The final posting should include the current standard KPMG Canada legal, accessibility, inclusion, language and compensation language required by People and Culture for the applicable province and hiring process.

This position requires written and oral fluency in English because it involves interpretation and application of English standards, guidance, laws and regulations, servicing of English-speaking clients located across Canada and collaboration with English Speaking colleagues located outside of Quebec.

Providing you with the support you need to be at your best

Our Values, The KPMG Way

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.

AI Usage

We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.

We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.

Apply About employer

More about this job

Responsibilities

Lead complex SOC 2 assurance and readiness engagements while managing client relationships and project economics. Provide expert cybersecurity advisory services and mentor team members to ensure high-quality delivery and professional growth.

Requirements

Requires approximately 6 to 10 years of experience in technology risk, cybersecurity, or IT audit with strong knowledge of AICPA Trust Services Criteria. Candidates must possess a university degree and relevant professional designations such as CPA, CISA, or CISSP.

Skills

SOC 2 Assurance
Cybersecurity Advisory
Technology Risk Consulting
AICPA Trust Services Criteria
IT Audit
Control Assessment
Risk Management
Project Management
Stakeholder Management
Report Writing
Cloud Security
Identity And Access Management
Change Management
Incident Response
Data Protection
Privacy

Visa sponsorship

Not detected in the job text

Keywords

SOC 2
Cybersecurity
Technology Risk
IT Audit
AICPA
Trust Services Criteria
ISO/IEC 27001
CPA
CISA
CISSP
CISM
CRISC
CIA
Cloud Security
Risk Management
Governance
Compliance
Assurance
Internal Audit
Data Privacy
Identity And Access Management
Vulnerability Management
Incident Response
Disaster Recovery
Third-party Risk Management
SaaS
Consulting
Project Management
Business Development
Professional Services

Report this job