Manager, Information Security

Konrad•Toronto, ON

5d•CA$110,000 - CA$130,000•Hybrid

About The Position

As the Manager, Information Security, you will contribute to the strategic and operational security initiatives that protect Konrad and the work we deliver for our clients. With a strong focus on IT security, you'll play a central role in safeguarding our internal tools, systems, and infrastructure against emerging threats, while contributing to the broader information security practices that keep our people, data, and client engagements secure. You'll also help align our internal security posture with the compliance requirements of the world's most recognizable brands, ensuring what we deliver meets or exceeds enterprise-level security standards. You're a strong contributor and hands-on practitioner who can navigate complex regulatory landscapes, communicate clearly with both technical teams and executive stakeholders, and champion a culture of security-first thinking. Working across the organization, you'll embed security best practices into how we operate internally and how we deliver for our clients, helping some of the world's top businesses and brands build digital experiences that shape the global economy. This role requires an in-person presence at our Toronto office 4 days a week to foster collaboration and hands-on leadership.

Requirements

5-7 years of progressive experience in IT and information security.
Proven track record of managing internal IT security and compliance programs, preferably within a digital agency, technology, or consulting environment.
Deep familiarity with common security frameworks and regulatory standards such as SOC 2, ISO 27001, GDPR, and CCPA.
Strong technical background, with hands-on understanding of cloud security, network architecture, access management, and secure software development practices.
Exceptional communication and negotiation skills, with the ability to articulate complex security concepts to both technical teams and non-technical client executives.
Ability to work collaboratively and in-person from our Toronto office four days per week.

Nice To Haves

Industry-recognized security certifications such as CISSP, CISM, or CISA are a strong asset.
Have you taken any courses at BrainStation? A lot of our design and development best practices and processes are taught during our courses - make sure to highlight this experience in your cover letter if you have!

Responsibilities

Develop, implement, and maintain IT security strategies and policies that protect Konrad's internal tools, systems, and proprietary data.
Support compliance efforts to keep our infrastructure and project delivery aligned with client security requirements and industry frameworks like SOC 2 and ISO 27001.
Serve as a key point of contact for client security assessments and questionnaires, confidently representing Konrad's security posture to enterprise stakeholders.
Assist with security audits, risk assessments, and vulnerability management programs, proactively identifying and mitigating risk.
Collaborate closely with IT, engineering, product, and consulting teams to integrate security best practices into internal operations and client delivery.