Governance, Risk & Compliance Manager

At SE Health, our people are everything—and our Home Office is an important part of that culture. When you choose to join SE Health, you become part of a caring, purpose-driven team that’s making a real difference across the country. Our Home Office is where innovation meets impact—supporting our direct care teams, driving strategic growth, and helping to shape the future of health care. As a member of our amazing Home Office team, you’ll collaborate with passionate colleagues, bring bold ideas to life, and contribute to meaningful work that supports thousands of care interactions each day. Learn why you come first at SE Health.
The Governance, Risk & Compliance (GRC) Manager is responsible for the operational execution of SE Health’s cybersecurity governance, risk management, and compliance programs, translating the cybersecurity strategy into repeatable processes, controls, and assurance activities. This role ensures alignment with regulatory standards such as ISO 27001, NIST CSF, SOC 2, PHIPA, and PIPEDA. The manager leads a team of analysts, drives policy and risk frameworks, and partners across departments to strengthen audit readiness, assurance, and accountability.
Governance & Policy Framework Management
Maintain, operationalize, and continuously improve approved cybersecurity governance frameworks, policies, and standards.
Ensure policies and standards remain aligned with regulatory requirements, internal controls, and the cybersecurity strategy.
Lead and mentor the GRC team in policy and framework management.

Risk Management & Control Assurance
Manage the day-to-day execution of cybersecurity risk identification, assessment, and mitigation planning processes, including maintenance of the cyber risk register.
Prepare risk treatment and risk acceptance recommendations for review and approval by Cyber Security management.
Ensure control testing and validation activities meet compliance and assurance requirements.

Audit & Regulatory Compliance
Coordinate internal and external audits, managing evidence collection and remediation tracking.
Maintain readiness for certification and compliance audits (ISO 27001, SOC 2, etc.).

Third-Party Risk & Data Protection
Manage third-party cyber risk assessments and data protection impact assessments, including risk scoring, documentation, and remediation tracking.
Escalate high-risk vendors, unresolved findings, and exception requests to the Cyber Security management for risk acceptance or further action.
Collaborate with Legal, Procurement, and Privacy to enforce contractual and data protection controls.

Awareness, Metrics & Continuous Improvement
Define cybersecurity awareness and training requirements, ensuring content aligns with policy, regulatory, and risk management needs, and coordinating delivery with HR, Communications, or Learning teams as appropriate.
Develop, track, and report key risk and performance indicators (KRIs/KPIs) related to control effectiveness, audit findings, third-party risk, and risk treatment progress to Cyber Security management.

Post-secondary education in an IT-related field (e.g., Cybersecurity, Computer Science, Information Technology) or an equivalent combination of relevant education, certifications, and professional work experience.
Enjoy comprehensive benefits, pension, flexible pay options, car-loan support, housing solutions and exclusive staff perks.
Thrive with hybrid work, flexible scheduling and a supportive, inclusive culture that puts people first.
Purpose & Impact: Join a national social enterprise where your voice matters. Every role helps advance health, spark innovation and strengthen communities across Canada.
Growth That Meets Your Ambition: Access tuition support, training and meaningful career pathways across a growing, future-focused organization.

SE Health is a not-for-profit social enterprise advancing health with heart. With 115+ years of impact, we bring hope, happiness and exceptional care to people and communities across Canada. We lead with empathy, dignity and purpose while building a future where everyone can realize their full health and well-being potential. COVID-19: To protect the health of our clients, teams, and communities, all SE Health employees must be fully vaccinated (two doses, 14+ days since the final dose).
Accessibility: If you require accommodations due to illness or disability, please contact Talent Acquisition at Voir email sur ca.snapjobsearch.com.
All applications and interviews are reviewed by our Talent Acquisition team. The compensation offered is determined based on the successful candidate’s relevant experience, skills, and competencies, taking into consideration internal equity.