Cybersecurity Manager

BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth.

Our Toronto area office is looking for a Cybersecurity Manager to join our cyber team to lead the following areas of responsibility, supporting the Cyber Risk Management and Transformation Service Delivery team:

1. Act as a subject matter expert to drive the successful completion of our cybersecurity projects, while collaborating with the rest of the delivery team to ensure that project milestones and deadlines are met.
2. Identify, assess, measure, and report on cyber/technology and privacy risks by conducting security reviews, audits, evaluations, risk assessments, and developing recommendations for improvements.
3. Ensure the client’s Cybersecurity risk posture is understood along with the effectiveness of the Cybersecurity practices and mitigation controls across the client organization.
4. Research, pilot, and implement solutions to improve the client’s overall security posture while ensuring that the solutions are tailored to client needs and the business environment.
5. Provide recommendations to keep infrastructure & applications secure, including disaster recovery, security architecture, data loss prevention, and application security services.
6. Assist the client in implementing and monitoring privacy policies and procedures to ensure compliance with data protection regulations such as GDPR, Quebec Law 25, PIPEDA, etc.
7. Evaluate security and control aspects of new technologies and define security requirements.
8. Identify opportunities for efficiencies in the work process and innovative approaches to completing the scope of work.
9. Provide strategic guidance on Cyber Security, Privacy, IT governance, risk, and compliance (GRC) initiatives to enhance the overall security and privacy posture.
10. Inform client security strategies based on experience across industry.
11. Participate in team problem-solving efforts and offer ideas to solve client issues.
12. Assist in proposal development, as requested.
13. Exhibit project management skills, including developing project plans, budgets, and deliverables schedules.

How do we define success for your role?

1. You demonstrate BDO's core values through all aspects of your work: Integrity, Respect, and Collaboration.
2. You understand your client’s industry, challenges, and opportunities; clients describe you as positive, professional, and delivering high-quality work.
3. You identify, recommend, and are focused on effective service delivery to your clients.
4. You share in an inclusive and engaging work environment that develops, retains & attracts talent.
5. You actively participate in the adoption of digital tools and strategies to drive an innovative workplace.
6. You grow your expertise through learning and professional development.

Education & Experience

1. Bachelor’s Degree in Information Technology, Information Systems Security, Cybersecurity, or related field.
2. 7+ years of experience in the Cybersecurity field.
3. Completion or about to complete one or a combination of the following designations: CISSP, CISA, CISM, ISO27001 Lead Auditor, CDPSE, CIPP/C, or CIPP/EU.
4. Experience in conducting threat risk assessments, cyber maturity assessments following industry recognized frameworks such as NIST, ISO 27001, CIS.
5. Strong background in cyber governance, risk management, and compliance.
6. Knowledge of data protection regulations (e.g., GDPR, Privacy Act, PIPEDA) with a focus on effective privacy management practices.
7. Preferred: Strong understanding and experience with security and privacy control audits or assessments (e.g., SOC 2, ISO 27001, NIST, GDPR).

Nice-to-have Skills/Experience:

1. Security assessments of network infrastructure, hosts, and applications.
2. Forensics – investigation and analysis of how and why a breach occurred.
3. Cloud computing experience – Azure, AWS, and/or GCP.

Why BDO?

Our people-first approach to talent has earned us a spot among Canada’s Top 100 Employers for 2024. This recognition is a milestone we’re thrilled to add to our collection of awards for both experienced and student talent experiences.

Our firm is committed to providing an environment where you can be successful in the following ways:

1. We enable you to engage with how we change and evolve, being a key contributor to the success and growth of BDO in Canada.
2. We help you become a better professional within our services, industries, and markets with extensive opportunities for learning and development.
3. We support your achievement of personal goals outside of the office and making an impact on your community.
4. Giving back adds up: Where company meets community. BDO is actively involved in our communities by supporting local charity initiatives. We support staff with local and national events where you will be given the opportunity to contribute to your community.

Total rewards that matter: We pay for performance with competitive total cash compensation that recognizes and rewards your contribution. We provide flexible benefits from day one, and a market-leading personal time off policy. We are committed to supporting your overall wellness beyond working hours and provide reimbursement for wellness initiatives that fit your lifestyle.

Everyone counts: We believe every employee should have the opportunity to participate and succeed. Through leadership by our Diversity, Equity and Inclusion Leader, we are committed to a workplace culture of respect, inclusion, and diversity. We recognize and celebrate the valuable differences among each of us, including race, religious beliefs, physical or mental disabilities, age, place of origin, marital status, family status, gender or gender identity, and sexual orientation. If you require accommodation to complete the application process, please contact us.

Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.

Our model is a blended approach designed to support the flexible needs of our people, the firm, and our clients. It’s about creating work experiences that meet everyone’s needs and providing flexibility to adjust when, where, and how we work to meet the expectations of our role.

Code of Conduct: Our Code of Conduct sets clear standards for how we conduct business. It reflects our shared values and commitments and includes guiding principles to help us make ethical decisions and maintain trust with each other, our clients, and the public.

Ready to make your mark at BDO? Click “Apply now” to send your up-to-date resume to one of our Talent Acquisition Specialists.