Skip to main content
Post your resume and find your next job on Indeed!

Senior Information Security jobs

Sort by: -
    • This includes overseeing risk assessments, audits, vendor security evaluations, policy enforcement, and leading a team of security analysts or specialists.
    • View all BDO jobs - Toronto jobs - Senior Information Security Analyst jobs in Toronto, ON
    • Salary Search: Senior Manager, Information Security salaries in Toronto, ON
    • See popular questions & answers about BDO
    • The role also serves as a senior technical resource during complex investigations and security transformation initiatives.
    • Employment Type: Permanent Full Time.
    • Hands-on expertise in core security controls, including Microsoft 365, Azure security, IAM, endpoint security, vulnerability management, and cloud security…
    • Working knowledge of information security governance frameworks, including ISO 27001/27002, NIST CSF, ITIL, and relevant Canadian regulatory requirements.
    • The role requires deep expertise in security monitoring, incident response, vulnerability management, and cloud security, ensuring the organization's security…
    • CISSP or other security certification related to information security is preferred.
    • Continuously evaluate new and existing security solutions.
    • Enterprise, regulated, or security-sensitive customer environments.
    • Work with customer infrastructure and security teams during installations and upgrades.
    • Demonstrated expertise troubleshooting complex network and security issues.
    • Maintain network security controls, segmentation, IDS/IPS technologies, and…
    • Développer une stratégie globale de sécurité des systèmes d'information alignée sur les objectifs de l’organisation;
    • Proven ability to perform risk, gaps, control, maturity, third-party, and compliance assessments; identify findings; and recommend practical remediation actions…
    • 5–7 years of information security and/or security advisory experience.
    • Proven expertise in threat and risk assessments, cloud security, and application security…
    • Administer and improve email security controls across Microsoft 365 and Exchange Online, including anti-phishing, anti-spam, malware protection, and mail-flow…
    • In this role, you will be responsible for monitoring, analyzing, and responding to security incidents, as well as helping to strengthen QuadReal’s overall…
    • Experience applying enterprise architecture and security framework principles;
    • Employment Type: Permanent Full Time.
    • Ability to work independently, prioritize competing infrastructure requirements, and provide senior-level technical support.
Get e-mail updates for the latest Senior Information Security jobs

By creating a job alert, you agree to our Terms . You can change your consent settings at any time by unsubscribing or as detailed in our terms.

Career Resources:

Job Post Details

Senior Manager, Information Security
BDO
·
3.5
Toronto, ON
$132,000–$182,000 a year
Full-time
Apply on company site

Job details

$132,000–$182,000 a year
Paid time off
Full-time
Toronto, ON

Full job description

Putting people first, every day

BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth.

Your Opportunity

The Senior Manager, Information Security leads the organization’s cybersecurity governance, risk management, and compliance programs, ensuring security policies, regulatory requirements, and industry best practices are effectively implemented.

The Senior Manager, Information Security is responsible for developing, managing, and executing IT security governance, risk, and compliance strategy. This includes overseeing risk assessments, audits, vendor security evaluations, policy enforcement, and leading a team of security analysts or specialists

This existing role is cross-functional, collaborating with IT, Risk, Legal, Compliance, and business teams to maintain compliance with frameworks like ISO 27001, NIST, SOC 2, and applicable privacy regulations such as GDPR and HIPAA

This role is ideal for a seasoned cybersecurity professional with deep GRC experience, capable of driving cybersecurity programs that ensure operational resilience, regulatory compliance, and enterprise risk mitigation while leading and mentoring a high-performing team.

Key Responsibilities

  • Leadership & Team Management: Build, mentor, and manage a high-performing GRC team, tracking objectives and key results (OKRs) and fostering a culture of continuous development.
  • Risk Management: Identify, assess, and monitor IT-related risks, evaluate risk exceptions, and oversee tactical and strategic resolution plans.
  • Compliance & Auditing: Plan and coordinate internal audits, third-party audits, and regulatory assessments; ensure corrective actions are implemented effectively.
  • Policy Development: Develop, update, and enforce IT security policies, standards, procedures, and guidelines aligned with changing regulations and business requirements.
  • Vendor and Third-Party Risk: Conduct security assessments of vendors, partners, and cloud providers to ensure regulatory and contractual compliance.
  • Governance & Frameworks Implementation: Oversee GRC platform deployment and configuration to automate control monitoring, reporting, and continuous improvement.
  • Awareness & Training: Implement cybersecurity awareness programs and deliver end-user or management training on security and compliance expectations.
    • Strategic Advisory: Serve as a trusted advisor for IT risk and compliance strategy, engaging with executive leadership and stakeholders to ensure alignment with enterprise goals.

Required Qualifications

  • Education: Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field.
  • Experience: 10+ years in IT security or risk management with 2+ years leading teams managing regulatory or compliance programs. Experience in technology risk consulting, IT audits, and multi-country compliance programs is highly valued.
  • Certifications: CISSP, CISM, CRISC, CISA, or CGEIT preferred.
  • Technical Skills: Proficiency in GRC tools, familiarity with identity/access management (LDAP/AD, SAML, OIDC), cloud security, and integration with SIEM, vulnerability management, and ITSM platforms
  • Soft Skills: Strong leadership, communication, stakeholder engagement, problem-solving, and decision-making abilities. Ability to translate complex compliance requirements into actionable strategies.

The expected range of compensation for this role is $132,000 to $182,000 annually. The advertised range represents the anticipated compensation for this position. The final offer may vary based on the successful candidate's qualifications, experience, specialized skills, and other business considerations.


Why BDO?

Our people-first approach to talent has earned us a spot among Canada’s Top 100 Employers for 2026 . This recognition is a milestone we’re thrilled to add to our collection of awards for both experienced and student talent experiences.


At BDO, our people experience is guided by three core pillars— Do work with genuine care, Do what matters with purpose, and Do what’s next - shaping how we support our people, serve our clients, and grow together.

Our firm is committed to providing an environment where you can be successful in the following ways:

  • We enable you to engage with how we change and evolve, being a key contributor to the success and growth of BDO in Canada.
  • We help you become a better professional within our services, industries, and markets with extensive opportunities for learning and development.
  • We support your achievement of personal goals outside of the office and making an impact on your community.
  • We foster a collaborative, inclusive environment where your ideas are valued, and you can do your best work with genuine care and purpose
    • We encourage innovation and forward thinking, empowering you to embrace what’s next and help shape the future of our firm

Giving back adds up: Where company meets community. BDO is actively involved in our communities by supporting local charity initiatives. We support staff with local and national events where you will be given the opportunity to contribute to your community.

Total rewards that matter: We pay for performance with competitive total cash compensation that recognizes and rewards your contribution. We provide comprehensive benefits from day one, and a flexible personal time off policy. We’re committed to supporting your overall wellbeing and provide reimbursement for wellness initiatives that fit your lifestyle.

Everyone counts: We are committed to creating a workplace where employees can participate fully, contribute meaningfully and succeed without barriers. We are dedicated to fostering a workplace defined by respect, fairness, and a true sense of belonging for everyone. We recognize and celebrate the unique experiences, identities, and perspectives that each of us bring – and that these experiences strengthen how we work together. Our commitment extends to ensuring that our application process is both inclusive and accessible. If you require accommodation to complete the application process, please contact us .


Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.

Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It’s about creating work experiences that meet everyone’s needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role.

Code of Conduct: Our Code of Conduct sets clear standards for how we conduct business. It reflects our shared values and commitments and includes guiding principles to help us make ethical decisions and maintain trust with each other, our clients, and the public.

BDO may use artificial intelligence enabled tools to support certain aspects of the recruitment process. While these tools assist our teams, our use of AI does not replace human decision making, and all employment-related outcomes are made by BDO personnel.


Privacy Policy | BDO Canada


Ready to make your mark at BDO? send your up-to-date resume to one of our Talent Acquisition Specialists.


To explore other opportunities at BDO, check out our careers page .



#LI-SA1
Let Employers Find YouUpload Your Resume