Risk, Quality and Compliance Lead

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Managed Services

Management Level

Senior Associate

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

The Client Security Officer (CSO) acts as a trusted advisor, ensuring clients’ security posture aligns with evolving threats, regulatory requirements, and business priorities. The role combines consulting experience, technical oversight, and client relationship management to deliver high-value security outcomes.

The CSO Manager role is focused on cybersecurity strategy and implementation, with strong expertise in Managed Security Services Provider (MSSP) models.

The Opportunity:  

As a Risk, Quality and Compliance Lead, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to:

• Responsibility for ISMS implementation and operations 

• Conduct periodical reviews of the established ISMS and identify gaps and nonconformities 

• Monitor, measure, evaluate, and continually improve the ISMS 

• Approve key ISMS documents and communicate them to relevant users 

• Define control owners and participate in control design 

• Monitor control effectiveness across the organization 

• Conduct periodical compliance and effectiveness assessments of the ISMS 

• Manage remediation of ISMS gaps and nonconformities 

• Liaise with corresponding teams to provide necessary evidence 

• Report on ISMS status to the ISMS Owner and ISMS Committee 

• Coordinate ISMS-related incidents 

• Communicate ISMS-related topics across all ISMS team members  

What You'll Bring: 
Your skills, knowledge, and experiences are what set you apart. Here's what we look for: 

• Professional knowledge of ISO 27000 standards 

• Professional knowledge of ISO 27001 implementation and auditing processes 

• Knowledge of Risk Assessment and Treatment methodologies (e.g. ISO 27005, IRAM2, OCTAVE) 

• Knowledge of business continuity and disaster recovery management 

• Knowledge of information security regulations and standards 

• Knowledge of ICT and security architecture 

• Knowledge of project management concepts 

• 3+ years of experience in management of cybersecurity and ISO 27001/ISMS 

• Proven experience with development and management of ISMS 

• Experience with project management and team organization  

• This position is required to be on-site. Additional information can be discussed with your interviewer 

Certifications - Beneficial 

• Certified Information Security Manager (CISM) 

• Certified in Risk and Information Systems Control (CRISC) 

• Certified Information Systems Security Professional (CISSP) 

• ISO/IEC 27001 Lead Implementer / Lead Auditor 

• Certified Information Systems Auditor (CISA ​

This position ensures continuity and upholds our standards of excellence following the departure of a valued team member. 

The salary range for this position is $112,400 - $162,400.  The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements.  We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package. 

Why you’ll love PwC  

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at:  https://jobs-ca.pwc.com/ca/en/life-at-pwc 

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

December 1, 2025

We’re committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process.

The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during our recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).

Nous tenons à répondre à vos besoins tout au long du processus de demande d’emploi, d’entrevue et d’embauche. Si vous avez besoin de mesures d’adaptation pour être parfaitement à l’aise, faites-le-nous savoir à l’étape de la demande d’emploi.

L’utilisation de l’intelligence artificielle (IA) dans le domaine du recrutement en est à ses balbutiements. Nous savons que vous pourriez vous demander comment et pourquoi nous y avons recours. À certains stades de notre processus de recrutement, nous comptons sur l’IA pour améliorer votre expérience. Par exemple, pendant l’examen du curriculum vitæ ou l’élaboration d’une liste de recommandations personnalisées, un agent conversationnel pourrait vous demander des précisions ou fixer avec vous un rendez-vous pour l’entrevue. L’IA nous aide à mieux lutter contre les préjugés, car l’évaluation des candidats se fait de façon juste et équitable, sans que les informations d’identification comme le nom ou le sexe soient connues. Elle nous permet également de mieux repérer les bons candidats pour un poste et d’évaluer le lien entre leurs compétences, leur expérience et leurs chances de réussir chez PwC Canada. Bien que l’IA facilite certaines étapes de notre processus de recrutement, les décisions finales d’embauche sont toujours prises par des personnes. Pour en savoir plus sur l’utilisation et la protection de vos données personnelles, consultez notre politique sur la protection des renseignements confidentiels (https://www.pwc.com/ca/fr/privacy-policy.html).