Manager IT Security Governance Risk Compliance
Job in
Laval, Province de Québec, Canada
Listing for:
Sonepar
Full Time
position
Listed on 2026-01-01
Job specializations:
-
IT/Tech
Cybersecurity, Information Security
Job Description & How to Apply Below
About Us:
Sonepar Canada is an independent family-owned company with global market leadership in the business-to-business distribution of electrical, industrial and safety products and related solutions. In Canada, we are represented by 9 locally managed electrical and industrial distributors and have over 100+ locations with coverage in 8 provinces.
We are a proud member of the Sonepar Group, the world's largest privately-held electrical distributor. The Sonepar Group is present in more than 40 countries with over 45,000 employees.
What’s In It For You?
You will be joining a market leader with over 40 years of experience to help you elevate your potential.You will be working for the world's #1 privately held business to business distributor of electrical products and related solutions.A chance to get involved in the forever growing electrical industry.We house the largest inventory to better service our customers and deliver on sales commitments.An opportunity for career development across many business departments within our organization.The Manager, IT Security, Governance, Risk and Compliance (GRC) is responsible for designing, implementing, and maintaining enterprise IT security programs and governance frameworks across the organization. This individual ensures cybersecurity posture, risk management practices, and regulatory compliance are embedded into all IT operations and business processes. Working cross-functionally, this role oversees security controls, audit readiness, risk assessments, policy development, and vendor compliance while fostering a culture of cybersecurity awareness.
Major Responsibilities:
Lead the development and implementation of IT policies, procedures, and controls in line with standards (e.g., ISO 27001, NIST, SOC
2)Manage IT security operations, including vulnerability management, incident response, and access controlsConduct risk assessments and plan mitigation measures across applications, infrastructure, vendors, and data processesOversee audit preparation and responses, ensuring alignment with internal and external compliance frameworksGuide the implementation of governance tools, GRC dashboards, and risk monitoring mechanismsCollaborate with Legal, Finance, Operations, and HR teams to support privacy, ethics, and compliance initiativesPromote cybersecurity training, awareness, and education among usersSupport business continuity and disaster recovery planning from a risk and security perspectiveDetailed responsibilities:
IT Governance & Policy Management:
Develop, implement, and maintain IT governance frameworks aligned with business objectives, organization-wideEnsure IT strategy and initiatives comply with internal and external regulatory requirementsMaintain governance framework documentation and ensure alignment with corporate objectivesRisk Management & Assessment:
Lead IT risk assessments to identify potential threats and vulnerabilitiesDevelop and implement mitigation strategies to strengthen security and operational resilienceOversee risk treatment plans and coordinate risk management activities with other departmentsCollaborate with internal audit teams to ensure effective IT risk management practicesRegulatory Compliance & Audit Preparation:
Ensure compliance with standards (ISO 27001, NIST, PCI-DSS, GDPR, SOX, HIPAA)Conduct audits, identify gaps, and ensure corrective actions are implementedPrepare and present reports on compliance, risks, and mitigation strategiesMaintain relationships with regulatory bodies, external auditors, and stakeholdersIncident Response & Business Continuity:
Develop and improve business continuity and disaster recovery plansEnsure incident response protocols are followedProvide recommendations for continuous improvement of IT security and resilienceCoordinate with security teams to assess impact and recovery strategies during incidentsRequirements:
Bachelor’s degree in Information Security, Information Technology, or related field; CISM, CISSP, or CRISC certifications preferred5+ years of experience in IT security and GRC roles within medium to large enterprise environmentsExperience with security tools, SIEM platforms, and…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
