Manager, Governance, Risk & Compliance; GRC

Manager, Governance, Risk & Compliance (GRC)

Job Category
:
Information Technology

Requisition Number
: MANAG
006103

• Posted :
  December 16, 2025
• Full-Time
• Hybrid

Showing 1 location

Mark Anthony Group is an entrepreneurial drinks company, built from the ground up by thinking differently, innovating and doing the unexpected. Our company is rooted in family values, a bold vision and relentless determination to continuously raise the bar and make a positive difference in consumers' lives. Founded in 1972, we’ve grown organically from a one-person import wine business into an international drinks company.

Our hallmarks include a portfolio of iconic beverage brands—
White Claw® Hard Seltzer, Mike’s Hard Lemonade, Olé Cocktail Co. and Más+ by Messi™—alongside a collection of luxury wineries in the Okanagan Valley, notably Mission Hill Family Estate, Cedar Creek Estate Winery, Martin’s Lane Winery, and Check Mate Artisanal Winery.

The Manager, Governance, Risk & Compliance (GRC) will lead a team responsible for the development and execution of governance frameworks, risk management strategies, and compliance programs that align IT systems with business objectives and regulatory requirements. This role is critical in maintaining a secure, compliant, and resilient technology environment by embedding security-first practices, managing audits, enforcing policies, and overseeing incident response processes.

What you'll do:

Security Policies & Standards

• Develop, maintain, and enforce IT security policies, standards, and guidelines to ensure compliance and consistency.

Governance, Risk & Compliance (GRC)

• Lead a comprehensive GRC program aligned with ISO
  27001, ISO
  27701, SOC2 Type II, NIST 800-53, PCI-DSS, GDPR, Quebec Law 25, and CCPA.
• Conduct risk assessments and control audits; manage Office 365 Compliance Center and drive continuous improvement.
• Build strong partnerships with business stakeholders to achieve compliance and best-in-class security practices.

Cybersecurity Risk Management

• Develop and oversee a global risk management program aligned with NIST and ISO frameworks.
• Provide reporting into Enterprise Risk Management and drive adoption of essential security controls.

Vulnerability Management

• Establish and manage a program ensuring timely prioritization and remediation of vulnerabilities across systems and applications.

Data Security

• Develop and maintain Data Security and Data Loss Prevention (DLP) programs leveraging DSPM capabilities.
• Implement an efficient vendor risk assessment process to support informed business decisions.

Security Awareness

• Design and manage an engaging security awareness and training program tailored to organizational needs and regulatory requirements.
• Develop metrics and dashboards to measure program effectiveness.

What you have:

• 5–7 years in IT security, risk management, or compliance, with leadership in GRC programs.
• Bachelor’s degree in Computer Science, Information Systems, or Business Administration.
• Proven ability in policy frameworks, vulnerability and risk management, and security awareness.
• Certifications:
  
  CRISC, CISM, or CISA preferred.
• Strong understanding of risk assessment methodologies, regulatory frameworks, and compliance standards.
• Experience with GRC platforms, Microsoft Purview & Compliance Center, DSPM, and metrics reporting.
• Familiarity with AI for risk assessment, compliance automation, security awareness, and risk reduction.

Why Join Us?

Mark Anthony is committed to hiring, engaging, and growing qualified, talented, and motivated team members at every level of our organization. We offer competitive compensation that recognizes individual and company performance. The typical hiring range for this position is $115,000 - $145,000 annually complemented by a bonus plan; the base pay is determined by market location and job-related knowledge, skills, experience, and education.

As part of our Total Rewards program, we are also proud to offer:

• Company-matched RRSP contributions
• Extended health and dental benefits, and mental health plans with 24/7 access to a primary care physician via Lumino Health
• Maternity & Adoption Leave Top Up and Paid Secondary Caregiver Leave
• Paid time off
• An extensive…