Find work in Canada.

325,307 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 18 days ago
EC
Senior Customer Success Manager (Travel)
Emburse Chrome River
Toronto, ON
- Full-time
Oversee key customer milestones, maintain accurate data in Salesforce, and lead the retention/cancellation save process when risks arise
Added 18 days ago
A
Data Engineering Specialist
Accenture
Toronto, ON
- Full-time
Assist the Data Science Manager in achieving objectives and support the development and execution of strategic roadmaps for data management and mobilization.
Added 18 days ago
SM
Manager, Talent & Total Rewards
St. Mildred's-Lightbourn School
Oakville, ON
- Full-time
Reporting to the Executive Director, Human Resources, the Manager, Talent & Total Rewards is responsible for developing and executing strategies that will attract, engage, and retain top…
Added 18 days ago
Product Marketing Manager
AlayaCare
Toronto, ON
…delivered, and how people age and heal at home. As Product Marketing Manager, US Home Care, you'll lead product marketing strategy and execution for our US Home Care business, turning…
Added 18 days ago
FC
CORPORATE TRAVELLER - CUSTOMER SUCCESS MANAGER - CALGARY, AB
Flight Centre Travel Group Canada
AB · Alberta, Canada
- Full-time
As a Customer Success Manager with Corporate Traveller, you will play a critical role in driving customer retention, revenue growth, and long-term client success. You'll manage a portfolio…
Added 19 days ago
Azure 365 Administrator
PACT
ON · Mississauga, Ontario
…the role is to enable and assist the development work of the Data & Innovation team by provisioning, securing and maintaining the platform layer on which the program's business intelligence…
Added 19 days ago
LV
EMAIL MARKETING SPECIALIST-EN
La Vie En Rose
Montreal, QC
- Full-time
Reporting to the Email Marketing Manager, the Email Marketing Specialist contributes to the development, optimization, and performance of La Vie en Rose’s email campaigns to support sales…
Added 19 days ago
BT
Senior Development Officer, Annual Program
Brain Tumour Foundation of Canada
London, ON
- Full-time
Develop and manage a donor Welcome Program to build donor data base.
Added 19 days ago
Corporate Traveller - Customer Success Manager - Calgary, AB
Flight Centre
AB
As a Customer Success Manager with Corporate Traveller, you will play a critical role in driving customer retention, revenue growth, and long-term client success. You'll manage a portfolio…
Added 19 days ago
Portfolio Administrator (6 Month Contract)
Nicola Wealth
Vancouver, BC
…investment funds and their exceptional performance, our 98% client retention rate and our award-winning culture, combine to position us as a national leader in wealth management. Recognized…
Added 19 days ago
LV
CRM AND LOYALTY MANAGER-EN
La Vie En Rose
Montreal, QC
- Full-time
Reporting to the Director, CRM and Loyalty, the Manager, CRM and Loyalty leads loyalty, customer relationship management, and data-driven customer strategies for La Vie en Rose and Bikini…
Added 19 days ago
M
Senior Business Development Manager - Captives
Manulife
Toronto, ON
- Full-time
The Senior Business Development Manager will be responsible for establishing and maintaining long-term relationships with clients, ensuring they view IGP as a professional, knowledgeable,…
Added 19 days ago
FC
Regulatory Compliance Manager, Trade Surveillance
Fidelity Canada
Mississauga, ON · Toronto, ON
- Full-time
The Regulatory Compliance Manager reports to the Manager, Trade Compliance and is responsible for the daily operation of the Trade Surveillance program and Trade Desk Supervision. This role…
Added 21 days ago
HR
Loyalty & Promotions Lead
Harry Rosen
Toronto, ON · Central Office
- Full-time
Execute the CLUB HARRY loyalty program strategy, supporting retention, engagement, and lifecycle objectives across tiers.
Added 21 days ago
GD
Specialist, Integrated Marketing
Groupe Dynamite, Inc Garage
Mont-Royal, QC · Ville Mont-Royal, Quebec
- Full-time
Analyze product performance, customer behavior insights and CRM data to optimize content across all channels, deliver on financial plans, and continuously improve E-commerce metrics;
Added 19 days ago
TC
Remarketing Manager
Toyota Credit Canada Inc.
Markham, ON
- Full-time
TFS currently has an exciting permanent opportunity as the Remarketing Manager reporting to the National Manaer of Business Operations. The Remarketing Manager is responsible for leading…
Added 19 days ago
B
Building Operator Tech 3
BGIS
Borden, ON
- Full-time
Reporting to the manager/supervisor, the Building Operator is responsible for performing maintenance, routine and on-demand services, including Preventive, Predictive activities on devices…
Added 19 days ago
B
Manager, Capital Planning
BGIS
Markham, ON
- Full-time
The Capital Planning Program Manager is a dedicated resource for assigned client(s) responsible for managing the asset assessment program and assisting the client in ongoing capital project…
Added 20 days ago
Digital Sales Advisor - Digital Sales
Talent Acquisition Team at Westland Insurance. Text reply only.
Surrey, BC
A total rewards program that takes care of your financial, physical, and mental health
Added 19 days ago
B
Manager, Capital Planning
BGIS
Markham, ON
- Full-time
The Capital Planning Program Manager is a dedicated resource for assigned client(s) responsible for managing the asset assessment program and assisting the client in ongoing capital project…
Added 20 days ago
B
VIP & Player Experience Manager
Blazesoft
Concord, ON
- Full-time
Shape your brand's VIP program - working with the brand manager and other stakeholders to evolve its tiers, rewards and engagement as the brand grows.
Added 19 days ago
Assistant Branch Manager
Money Mart
Selkirk, MB
Education Reimbursement Program to invest in your education and career growth.
Added 20 days ago
UO
Administrative Manager
University of British Columbia
Vancouver, BC · UBCV | Brock Hall (BRCK)
- $6,143.67 to $8,830.25 CAD / month
- Full-time
…process of EIO team, including supporting EIO senior leaders and program managers with their budget planning and management. The Manager participates in operational planning, manages…
Added 19 days ago
TU
Administrative Manager
The University of British Columbia
Vancouver, BC
- $6,143.67 to $8,830.25 CAD / month
- Full-time
…process of EIO team, including supporting EIO senior leaders and program managers with their budget planning and management. The Manager participates in operational planning, manages…
Added 20 days ago
M
Bilingual Implementation Specialist
Manulife
Halifax, NS · Waterloo, ON · Montreal, QC
- Full-time
Capitalizing on sound industry knowledge, the Implementation Manager (IM) delivers superior service to their various client and advisor groups within the Group Retirement Pension…

Closed listing

PACT

Security & Compliance Manager

ON, Canada
Mississauga, ON, L4V 1A3, Canada

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Job details

Experience: 7-10 years experience in information security, IT compliance, governance risk and compliance, or audit
Posting language: English
Posted: Sep 18, 2026

Similar jobs hiring now

Search current openings

Original job description

Archived listing. The details below describe a past opening.

PACT is a General Partnership of Alberici, Amico, Kenaidan and Obayashi delivering the Toronto Pearson Accelerator program. The Manager, Security & Compliance owns PACT's information security programme, combining ownership with hands-on execution: the role personally operates controls, collects evidence, authors policy and works in the Microsoft 365 tenant, and carries no direct reports. The role owns the ISO/IEC 27001:2022 certification initiative targeted at Q1 2027 and the parallel SOC 2 Type 2 initiative, run as one control programme with two reporting outputs, and contributes to security architecture and strategy through input into platform security standards and the multi-year security roadmap. Because member companies second staff and retain the endpoints they issue, endpoint management, HR and office physical security are not centralized, and control ownership splits across PACT tenant-managed, inherited, shared and client-owned scopes.

RESPONSIBILITIES

Programme Ownership and ISMS Documentation

Own the ISO/IEC 27001:2022 certification initiative to the Q1 2027 target and the SOC 2 Type 2 initiative
Run both as one control programme with two reporting outputs, sharing roughly 75-80 percent of control intent
Author, approve, publish, version-control and maintain the information security policy suite, retaining acknowledgement records
Author and maintain the Statement of Applicability across the applicable control set, justifying inclusion, exclusion and inheritance
Operate the document-control procedure, competence matrix, improvement log and corrective-action register in a governed SharePoint library
Represent certification and attestation status accurately in internal, member-company, client and external communications
Report status to the IT Steering Committee and provide input to security budget, tooling spend and vendor selection

Risk Management and Control Operation

Define a risk methodology covering acceptance criteria, impact and likelihood scales, ownership and treatment options
Establish and maintain the risk register through formal risk assessment, sustained as a live record
Produce and track the risk treatment plan, verifying control effectiveness rather than accepting reported completion
Operate annual and event-triggered reassessment on new SaaS, tenant change, incident, audit finding or joint-venture change
Maintain the evidence inventory, coordinate the quarterly privileged, guest and application access review cycle, and review logs
Ensure audit logging and retention across the tenant meet certification and investigative requirements
Ensure backup and recovery controls are evidenced, covering schedule, immutability, retention and restore testing
Maintain the information asset register and baseline configuration review, recording drift and approvals

Third-Party and Member-Company Assurance

Maintain the supplier security register and review cadence covering the ICT supply chain and managed service provider
Review Entra application registrations as privileged suppliers, documenting owner, purpose, permission scope and review date
Maintain the control-ownership split across PACT tenant-managed, inherited, shared and client-owned scopes
Collect and refresh member-company attestations for inherited endpoint, AV/EDR, patching, physical security and HR controls
Coordinate shared controls with member-company IT and security teams, covering classification, awareness and business continuity
Maintain the joiner, mover and leaver process with each member company, and manage dual member-company and PACT identities

Security Architecture, Operations and Tenant Hardening

Provide input into platform security architecture, security standards and the multi-year security roadmap
Assess new platforms, integrations and tenant changes against security architecture principles and target-state control design
Operate and evidence the Entra ID Conditional Access posture: MFA enforcement, legacy authentication blocking and glass-break accounts
Hold the managed detection and response provider to service expectations for Microsoft 365 monitoring and response
Tune Microsoft Defender for Office 365 anti-phishing, anti-malware, Safe Links and Safe Attachments with the Azure 365 Administrator
Define Purview label, DLP and retention policy requirements configured by the Azure 365 Administrator, and drive classification roll-out with the SharePoint Administrator
Govern privileged access, with privileged access management deployed and operated by the Azure 365 Administrator
Coordinate patch and vulnerability activity, act as security voice in change advisory, and direct the managed service provider

Incident Response, Awareness and Improvement

Author and publish the incident response plan, event triage matrix, vendor runbook and evidence-preservation procedure
Publish and promote a security event reporting channel for all users, with defined response expectations
Run and document tabletop exercises and lead post-incident review through to verified corrective-action closure
Administer the security awareness platform and monthly programme, harvesting completion and new-hire onboarding records
Deliver awareness uplift for privileged users and leadership, and coordinate analytics governance with the Manager, Data & Innovation
Own and govern the AI-use policy through access gating and record-keeping, with Copilot platform readiness and licensing owned by the Azure 365 Administrator

Certification, Audit Readiness and Reporting

Engage external assessors and consultants, and prepare for Stage 1 and Stage 2 certification assessment
Liaise with external consultants and the certification body, assembling evidence packs and tracking findings to closure
Drive SOC 2 Type 2 readiness across the Security, Availability and Confidentiality criteria and operate quarterly self-assessment
Prepare for, coordinate and remediate against audits without performing the ISMS internal audit, as Clause 9.2 requires independent auditors
Support the internal audit programme hosted under Quality / QMS or co-sourced externally
Report quarterly on phishing-simulation click rate, MFA and phishing-resistant coverage, patch mean-time-to-remediate by severity, audit-log retention coverage, evidence completeness and corrective-action closure

Qualifications

7-10 years experience in information security, IT compliance, governance risk and compliance, or audit
Bachelor's degree in information technology, information security, risk management or a related discipline preferred
Demonstrated ownership of an ISO 27001 ISMS or equivalent such as SOC 2, NIST CSF or ISO 27002
Hands-on Microsoft 365 security administration across Entra ID Conditional Access, Microsoft Purview and Microsoft Defender
Contribution to security architecture, security standards and multi-year security roadmap development at manager level
Practical risk assessment experience, including facilitating workshops and maintaining a risk register and treatment plan
Policy authoring through approval and publication, and evidence collection for an external certification body
Third-party and vendor security assessment experience, with input to vendor selection and security budget
Experience reporting to a steering committee and coordinating across organisations that do not report to the role
Certification such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, CISSP or SC-400 preferred
SOC 2 Type 2 readiness, major capital program delivery, joint-venture or multi-employer environments, and PIPEDA exposure considered assets

Key Deliverables

ISMS documentation set and information security policy suite published and maintained under document control
Statement of Applicability authored and maintained across the applicable control set, with inheritance justified
Live risk register and risk treatment plan maintained through formal risk assessment and scheduled reassessment
Incident response plan published, event reporting channel operating, and response tested through regular tabletop exercise
Security architecture input and multi-year security roadmap maintained and reviewed with the IT Steering Committee
Evidence inventory maintained, quarterly KPI reporting into management review, and readiness sustained against the Q1 2027 target

WORKING CONDITIONS

The position will be based at our office in Mississauga, Ontario, with visits to the Airport site as required. Your work schedule will be Monday to Friday during regular office or site hours. At times, operational needs may require work outside these hours, with reasonable notice provided. All schedule or on‑call adjustments will comply with applicable employment standards legislation. It is mandatory for all employees to complete a Criminal Background check and successfully attain a Restricted Access Identity Card (RAIC) upon joining the company.

PACT is an equal opportunity employer and is committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act. We are committed to providing an inclusive and barrier free candidate experience and work environment. If you require accommodation to apply or if selected to participate in an assessment process, please advise Human Resources.

About employer

More about this job

Responsibilities

The Security & Compliance Manager is responsible for owning the information security programme, including ISO/IEC 27001 and SOC 2 Type 2 certification initiatives. They will manage risk assessments, maintain security policies, and coordinate security architecture and compliance across the organization.

Requirements

Candidates must have 7-10 years of experience in information security, IT compliance, or risk management, along with a bachelor's degree in a related field. Hands-on experience with Microsoft 365 security administration and a strong understanding of security frameworks are essential.

Skills

ISO/IEC 27001
SOC 2 Type 2
Information security
Risk management
Microsoft 365
Entra ID
Microsoft Purview
Microsoft Defender
Compliance
Audit readiness
Policy authoring
Security architecture
Incident response
Vendor management
Governance
Tabletop exercises

Benefits

Employment accommodation
Inclusive work environment

Visa sponsorship

Not detected in the job text

Keywords

ISO/IEC 27001:2022
SOC 2 Type 2
Information Security Management System
Risk Register
Microsoft 365
Entra ID
Microsoft Purview
Microsoft Defender
Compliance
Audit
Governance
Security Architecture
Incident Response
Vendor Security
Tabletop Exercises
CISA
CRISC
CISM
CISSP
SC-400
PIPEDA
RAIC
Information Security Policy
Statement of Applicability
Conditional Access
DLP
Vulnerability Management
Security Awareness
AI-use policy
IT Steering Committee

Report this job