Find work in Canada.

317,350 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 23 days ago
M
Senior Manager, Continuity and Resilience Risk
Manulife
Halifax, NS · Toronto, ON · Waterloo, ON · Montreal, QC
- Full-time
Develop execution strategy for the Business Continuity Management program by collecting and analyzing data (internal and external), applying best practices, problem-solving, and…
Added 16 days ago
1
Senior Privacy & Compliance Manager
123Dentist
Toronto, ON · Boucherville, QC
- $135,000 to $165,000 CAD / year
- Full-time
Operate the organization’s ESG program – tracking initiatives and metrics and preparing reporting and disclosures
Added 16 days ago
TU
Academic Advisor, Vantage College and Faculty of Science
The University of British Columbia
Vancouver, BC
- $7,727.33 to $11,112 CAD / month
- Full-time
…to promote the academic success, personal development, and retention of international students enrolled in Vantage College, and in over 50 undergraduate degree, dual and joint degree, and…
Added 16 days ago
NN
Loyalty Marketing Specialist
Nestlé Nespresso SA
Montreal, QC
- Full-time
…Montreal, reporting into the Consumer Experience, Lifecycle & Retention Manager. This role will support the Lifecycle team in the development of retention and loyalty strategies with a…
Added 17 days ago
UO
Academic Advisor, Vantage College and Faculty of Science
University of British Columbia
Vancouver, BC · UBCV | Chemistry Physics Building A (CHPH)
- $7,727.33 to $11,112 CAD / month
- Full-time
…to promote the academic success, personal development, and retention of international students enrolled in Vantage College, and in over 50 undergraduate degree, dual and joint degree, and…
Added 17 days ago
GV
Volunteer Engagement Coordinator
Greater Vancouver Food Bank
Burnaby, BC
- Full-time
…administrative operations that support the organization's volunteer program. The Coordinator serves as a primary point of contact for volunteers and prospective volunteers, ensuring a…
Added 17 days ago
Loyalty Marketing Specialist
Nestle Operational Services Worldwide SA
Montreal, QC
…Montreal, reporting into the Consumer Experience, Lifecycle & Retention Manager. This role will support the Lifecycle team in the development of retention and loyalty strategies with a…
Added 17 days ago
CT
Manager, Statistical Modelling & Advanced Analytics
Canadian Tire Corporation
Toronto, ON
- Full-time
Reporting to the AVP, Advanced Analytics and Modelling, the Manager, Statistical Modelling & Advanced Analytics will lead high-impact statistical modelling work that helps shape decisions…
Added 17 days ago
O
Revenue Enablement Manager
Owner.com
Toronto, ON
- Full-time
…Revenue Enablement Specialist to own and progress the enablement program maturation specifically for our AE…
Added 16 days ago
EC
Senior Customer Success Manager (Travel)
Emburse Chrome River
Toronto, ON
- Full-time
Oversee key customer milestones, maintain accurate data in Salesforce, and lead the retention/cancellation save process when risks arise
Added 16 days ago
A
Data Engineering Specialist
Accenture
Toronto, ON
- Full-time
Assist the Data Science Manager in achieving objectives and support the development and execution of strategic roadmaps for data management and mobilization.
Added 16 days ago
SM
Manager, Talent & Total Rewards
St. Mildred's-Lightbourn School
Oakville, ON
- Full-time
Reporting to the Executive Director, Human Resources, the Manager, Talent & Total Rewards is responsible for developing and executing strategies that will attract, engage, and retain top…
Added 16 days ago
Product Marketing Manager
AlayaCare
Toronto, ON
…delivered, and how people age and heal at home. As Product Marketing Manager, US Home Care, you'll lead product marketing strategy and execution for our US Home Care business, turning…
Added 16 days ago
Assistant Store Manager
Mejuri
Toronto, ON
The team views you as the go-to for guidance when it comes to all things STACK and you serve as a partner to the Store Manager across business areas such as operations, inventory control,…
Added 16 days ago
FC
CORPORATE TRAVELLER - CUSTOMER SUCCESS MANAGER - CALGARY, AB
Flight Centre Travel Group Canada
AB · Alberta, Canada
- Full-time
As a Customer Success Manager with Corporate Traveller, you will play a critical role in driving customer retention, revenue growth, and long-term client success. You'll manage a portfolio…
Added 17 days ago
Azure 365 Administrator
PACT
ON · Mississauga, Ontario
…the role is to enable and assist the development work of the Data & Innovation team by provisioning, securing and maintaining the platform layer on which the program's business intelligence…
Added 16 days ago
CC
Signature Programs Specialist
Canadian Cancer Society
Calgary, AB
- $52,000 to $56,000 CAD / year
- Full-time
This position will report to the Manager of Signature Programs who directs our national volunteer recruitment and retention/stewardship strategy for our Run for the Cure events across…
Added 17 days ago
Security & Compliance Manager
PACT
ON · Mississauga, Ontario
PACT is a General Partnership of Alberici, Amico, Kenaidan and Obayashi delivering the Toronto Pearson Accelerator program. The Manager, Security & Compliance owns PACT's information…
Added 16 days ago
LV
EMAIL MARKETING SPECIALIST-EN
La Vie En Rose
Montreal, QC
- Full-time
Reporting to the Email Marketing Manager, the Email Marketing Specialist contributes to the development, optimization, and performance of La Vie en Rose’s email campaigns to support sales…
Added 16 days ago
BT
Senior Development Officer, Annual Program
Brain Tumour Foundation of Canada
London, ON
- Full-time
Develop and manage a donor Welcome Program to build donor data base.
Added 16 days ago
Corporate Traveller - Customer Success Manager - Calgary, AB
Flight Centre
AB
As a Customer Success Manager with Corporate Traveller, you will play a critical role in driving customer retention, revenue growth, and long-term client success. You'll manage a portfolio…
Added 16 days ago
Portfolio Administrator (6 Month Contract)
Nicola Wealth
Vancouver, BC
…investment funds and their exceptional performance, our 98% client retention rate and our award-winning culture, combine to position us as a national leader in wealth management. Recognized…
Added 16 days ago
LV
CRM AND LOYALTY MANAGER-EN
La Vie En Rose
Montreal, QC
- Full-time
Reporting to the Director, CRM and Loyalty, the Manager, CRM and Loyalty leads loyalty, customer relationship management, and data-driven customer strategies for La Vie en Rose and Bikini…
Added 17 days ago
M
Senior Business Development Manager - Captives
Manulife
Toronto, ON
- Full-time
The Senior Business Development Manager will be responsible for establishing and maintaining long-term relationships with clients, ensuring they view IGP as a professional, knowledgeable,…
Added 17 days ago
FC
Regulatory Compliance Manager, Trade Surveillance
Fidelity Canada
Mississauga, ON · Toronto, ON
- Full-time
The Regulatory Compliance Manager reports to the Manager, Trade Compliance and is responsible for the daily operation of the Trade Surveillance program and Trade Desk Supervision. This role…

PACT

Security & Compliance Manager

ON, Canada
Mississauga, ON, L4V 1A3, Canada

Apply About employer

Applications open in a new tab.

Job details

Experience: 7-10 years experience in information security, IT compliance, governance risk and compliance, or audit
Posting language: English
Posted: Sep 18, 2026

Original job description

PACT is a General Partnership of Alberici, Amico, Kenaidan and Obayashi delivering the Toronto Pearson Accelerator program. The Manager, Security & Compliance owns PACT's information security programme, combining ownership with hands-on execution: the role personally operates controls, collects evidence, authors policy and works in the Microsoft 365 tenant, and carries no direct reports. The role owns the ISO/IEC 27001:2022 certification initiative targeted at Q1 2027 and the parallel SOC 2 Type 2 initiative, run as one control programme with two reporting outputs, and contributes to security architecture and strategy through input into platform security standards and the multi-year security roadmap. Because member companies second staff and retain the endpoints they issue, endpoint management, HR and office physical security are not centralized, and control ownership splits across PACT tenant-managed, inherited, shared and client-owned scopes.

RESPONSIBILITIES

Programme Ownership and ISMS Documentation

Own the ISO/IEC 27001:2022 certification initiative to the Q1 2027 target and the SOC 2 Type 2 initiative
Run both as one control programme with two reporting outputs, sharing roughly 75-80 percent of control intent
Author, approve, publish, version-control and maintain the information security policy suite, retaining acknowledgement records
Author and maintain the Statement of Applicability across the applicable control set, justifying inclusion, exclusion and inheritance
Operate the document-control procedure, competence matrix, improvement log and corrective-action register in a governed SharePoint library
Represent certification and attestation status accurately in internal, member-company, client and external communications
Report status to the IT Steering Committee and provide input to security budget, tooling spend and vendor selection

Risk Management and Control Operation

Define a risk methodology covering acceptance criteria, impact and likelihood scales, ownership and treatment options
Establish and maintain the risk register through formal risk assessment, sustained as a live record
Produce and track the risk treatment plan, verifying control effectiveness rather than accepting reported completion
Operate annual and event-triggered reassessment on new SaaS, tenant change, incident, audit finding or joint-venture change
Maintain the evidence inventory, coordinate the quarterly privileged, guest and application access review cycle, and review logs
Ensure audit logging and retention across the tenant meet certification and investigative requirements
Ensure backup and recovery controls are evidenced, covering schedule, immutability, retention and restore testing
Maintain the information asset register and baseline configuration review, recording drift and approvals

Third-Party and Member-Company Assurance

Maintain the supplier security register and review cadence covering the ICT supply chain and managed service provider
Review Entra application registrations as privileged suppliers, documenting owner, purpose, permission scope and review date
Maintain the control-ownership split across PACT tenant-managed, inherited, shared and client-owned scopes
Collect and refresh member-company attestations for inherited endpoint, AV/EDR, patching, physical security and HR controls
Coordinate shared controls with member-company IT and security teams, covering classification, awareness and business continuity
Maintain the joiner, mover and leaver process with each member company, and manage dual member-company and PACT identities

Security Architecture, Operations and Tenant Hardening

Provide input into platform security architecture, security standards and the multi-year security roadmap
Assess new platforms, integrations and tenant changes against security architecture principles and target-state control design
Operate and evidence the Entra ID Conditional Access posture: MFA enforcement, legacy authentication blocking and glass-break accounts
Hold the managed detection and response provider to service expectations for Microsoft 365 monitoring and response
Tune Microsoft Defender for Office 365 anti-phishing, anti-malware, Safe Links and Safe Attachments with the Azure 365 Administrator
Define Purview label, DLP and retention policy requirements configured by the Azure 365 Administrator, and drive classification roll-out with the SharePoint Administrator
Govern privileged access, with privileged access management deployed and operated by the Azure 365 Administrator
Coordinate patch and vulnerability activity, act as security voice in change advisory, and direct the managed service provider

Incident Response, Awareness and Improvement

Author and publish the incident response plan, event triage matrix, vendor runbook and evidence-preservation procedure
Publish and promote a security event reporting channel for all users, with defined response expectations
Run and document tabletop exercises and lead post-incident review through to verified corrective-action closure
Administer the security awareness platform and monthly programme, harvesting completion and new-hire onboarding records
Deliver awareness uplift for privileged users and leadership, and coordinate analytics governance with the Manager, Data & Innovation
Own and govern the AI-use policy through access gating and record-keeping, with Copilot platform readiness and licensing owned by the Azure 365 Administrator

Certification, Audit Readiness and Reporting

Engage external assessors and consultants, and prepare for Stage 1 and Stage 2 certification assessment
Liaise with external consultants and the certification body, assembling evidence packs and tracking findings to closure
Drive SOC 2 Type 2 readiness across the Security, Availability and Confidentiality criteria and operate quarterly self-assessment
Prepare for, coordinate and remediate against audits without performing the ISMS internal audit, as Clause 9.2 requires independent auditors
Support the internal audit programme hosted under Quality / QMS or co-sourced externally
Report quarterly on phishing-simulation click rate, MFA and phishing-resistant coverage, patch mean-time-to-remediate by severity, audit-log retention coverage, evidence completeness and corrective-action closure

Qualifications

7-10 years experience in information security, IT compliance, governance risk and compliance, or audit
Bachelor's degree in information technology, information security, risk management or a related discipline preferred
Demonstrated ownership of an ISO 27001 ISMS or equivalent such as SOC 2, NIST CSF or ISO 27002
Hands-on Microsoft 365 security administration across Entra ID Conditional Access, Microsoft Purview and Microsoft Defender
Contribution to security architecture, security standards and multi-year security roadmap development at manager level
Practical risk assessment experience, including facilitating workshops and maintaining a risk register and treatment plan
Policy authoring through approval and publication, and evidence collection for an external certification body
Third-party and vendor security assessment experience, with input to vendor selection and security budget
Experience reporting to a steering committee and coordinating across organisations that do not report to the role
Certification such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, CISSP or SC-400 preferred
SOC 2 Type 2 readiness, major capital program delivery, joint-venture or multi-employer environments, and PIPEDA exposure considered assets

Key Deliverables

ISMS documentation set and information security policy suite published and maintained under document control
Statement of Applicability authored and maintained across the applicable control set, with inheritance justified
Live risk register and risk treatment plan maintained through formal risk assessment and scheduled reassessment
Incident response plan published, event reporting channel operating, and response tested through regular tabletop exercise
Security architecture input and multi-year security roadmap maintained and reviewed with the IT Steering Committee
Evidence inventory maintained, quarterly KPI reporting into management review, and readiness sustained against the Q1 2027 target

WORKING CONDITIONS

The position will be based at our office in Mississauga, Ontario, with visits to the Airport site as required. Your work schedule will be Monday to Friday during regular office or site hours. At times, operational needs may require work outside these hours, with reasonable notice provided. All schedule or on‑call adjustments will comply with applicable employment standards legislation. It is mandatory for all employees to complete a Criminal Background check and successfully attain a Restricted Access Identity Card (RAIC) upon joining the company.

PACT is an equal opportunity employer and is committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act. We are committed to providing an inclusive and barrier free candidate experience and work environment. If you require accommodation to apply or if selected to participate in an assessment process, please advise Human Resources.

Apply About employer

More about this job

Responsibilities

The Security & Compliance Manager is responsible for owning the information security programme, including ISO/IEC 27001 and SOC 2 Type 2 certification initiatives. They will manage risk assessments, maintain security policies, and coordinate security architecture and compliance across the organization.

Requirements

Candidates must have 7-10 years of experience in information security, IT compliance, or risk management, along with a bachelor's degree in a related field. Hands-on experience with Microsoft 365 security administration and a strong understanding of security frameworks are essential.

Skills

ISO/IEC 27001
SOC 2 Type 2
Information security
Risk management
Microsoft 365
Entra ID
Microsoft Purview
Microsoft Defender
Compliance
Audit readiness
Policy authoring
Security architecture
Incident response
Vendor management
Governance
Tabletop exercises

Benefits

Employment accommodation
Inclusive work environment

Visa sponsorship

Not detected in the job text

Keywords

ISO/IEC 27001:2022
SOC 2 Type 2
Information Security Management System
Risk Register
Microsoft 365
Entra ID
Microsoft Purview
Microsoft Defender
Compliance
Audit
Governance
Security Architecture
Incident Response
Vendor Security
Tabletop Exercises
CISA
CRISC
CISM
CISSP
SC-400
PIPEDA
RAIC
Information Security Policy
Statement of Applicability
Conditional Access
DLP
Vulnerability Management
Security Awareness
AI-use policy
IT Steering Committee

Report this job