Manager, Cybersecurity Governance, Risk & Compliance

About the role

The Manager, Cybersecurity Governance, Risk & Compliance is a hands‑on people manager accountable for cybersecurity compliance, audit delivery and risk management across Questrade Financial Group’s regulated entities. The role leads SOC 2 Type II and ISO 27001 audit cycles, owns the cybersecurity control framework and enterprise risk register, and builds and manages a small team of GRC specialists. It operates in a dual regulatory environment (CIRO‑regulated dealer and wealth entities and OSFI‑regulated federal financial institutions) and is based in Israel working Toronto business hours.

Key responsibilities

• Lead SOC 2 Type II readiness and the annual audit cycle end‑to‑end, including evidence planning, control owner coordination, sampling, auditor requests and report issuance.
• Drive ISO/IEC 27001:2022 readiness and certification, covering ISMS scope, Statement of Applicability, risk treatment plan, internal audit programme, management review and non‑conformity closure.
• Manage NIST CSF 2.0 current and target profile assessments, coordinate external assessments and produce a gap‑driven remediation roadmap.
• Build and maintain a unified control set mapped across NIST CSF 2.0, ISO 27001 Annex A, SOC 2 Trust Services Criteria, OSFI B‑13, OSFI B‑10 and CIRO expectations.

Required profile

• Hands‑on manager with experience leading SOC 2 Type II and ISO 27001 audit cycles.
• Familiarity with dual regulatory environments, specifically CIRO and OSFI requirements.
• Proven ability to design, implement and maintain comprehensive cybersecurity control frameworks.
• Experience coaching and managing a small team of GRC specialists.

Required skills

• SOC 2 Type II audit methodology
• ISO/IEC 27001:2022 certification process
• NIST Cybersecurity Framework 2.0
• OSFI B‑13 and B‑10 compliance standards
• CIRO regulatory expectations

What we offer

• Health and wellbeing resources and programs
• Paid vacation and personal days for work‑life balance
• Competitive compensation and benefits packages
• Opportunities for career growth and development
• Chance to contribute to community causes
• Inclusive and collaborative work environment