GRC Jobs in Toronto.
All active GRC roles based in Toronto.
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Are you looking to thrive in a stimulating work environment?
Join Levio, a leader in digital transformation, and take your career to the next level. You will work alongside high-caliber professionals on ambitious, large-scale technology projects, directly embedded in our clients’ environments. At Levio, we value expertise, curiosity, and continuous improvement — and we give you the space to grow.
About the Role
The Artificial Intelligence Security Architect is responsible for defining the security architecture, governance, and risk management frameworks for AI and machine learning systems across the organization. This senior role ensures AI technologies are designed, deployed, and operated securely, ethically, and in compliance with regulatory requirements. The architect works closely with AI engineering teams, cloud architects, GRC leaders, and executive stakeholders to embed security and trust into AI-driven solutions. The role will be remote.
Why Join Levio?
- Work on complex, high impact digital transformation projects
- Collaborate with experienced, multidisciplinary teams
- Continuously develop your technical and professional expertise
- Enjoy flexibility, autonomy, and a strong people first culture
- Be part of an organization that values diversity, inclusion, and innovation
Role and Responsibilities
AI Security Architecture & Strategy
- Define enterprise AI security architecture and guardrails.
- Establish secure reference architectures for AI platforms, models, and data pipelines.
- Design controls to mitigate AI-specific threats (model abuse, data poisoning, adversarial attacks).
- Align AI security strategy with Zero Trust and defense-in-depth principles.
AI Governance, Risk & Compliance
- Architect AI governance frameworks aligned with NIST AI RMF, ISO standards, and regulatory requirements.
- Define AI risk classification, impact assessment, and control baselines.
- Support AI auditability, explainability, transparency, and accountability.
Secure MLOps & Cloud AI
- Architect secure MLOps pipelines with integrated security controls.
- Define access, identity, secrets management, and logging for AI platforms.
- Ensure secure use of third-party and open-source AI models.
Data Security & Privacy for AI
- Define data protection architecture for AI datasets and outputs.
- Ensure compliance with privacy laws (GDPR, Law 25, PIPEDA).
- Architect anonymization, encryption, and data governance mechanisms.
Advisory & Leadership
- Act as senior advisor on AI security and trust.
- Mentor analysts and guide AI engineering teams.
- Communicate AI risks and mitigation strategies to executives and boards.
Qualifications and Experience
- Deep understanding of AI/ML architectures and lifecycle.
- Strong knowledge of AI security threats and mitigations.
- Expertise in cloud AI platforms and secure cloud architecture.
- Strong background in cybersecurity architecture and risk management.
- Familiarity with AI governance and ethical AI frameworks
- CISSP, ISO 27001 Lead Implementer, NIST AI RMF Practitioner, CCSP (Cloud Security), AI governance or ethics certifications (an asset)
Compensation (Ontario)
The salary range provided reflects a good faith estimate based on factors such as experience, technical expertise, location, and relevant certifications. Final compensation will be determined according to the specific circumstances of each candidate.
Estimated salary range: $110,000 to $150,000 per year.
This posting is a current hiring need.
Benefits and Work Environment
Levio offers a comprehensive and flexible benefits package designed to support your professional growth and personal wellbeing, including:
- 4 weeks of cumulative vacation starting from day one
- Flexible working hours
- Professional Development Allowance (PDA) for training, computer equipment, and physical activities
- Training tailored to your areas of expertise
- Registered Retirement Savings Plan (RRSP) with employer contribution up to 3% of gross salary
- Modular group insurance plan
- Public transportation or parking reimbursement when required
- Referral bonuses
- 11 statutory holidays
- Personal days
- An active social life (5to7 events, social club, healthy snacks, coffee, and more)
Position Details
- Employment type: Full time, permanent
Notice on the Use of Artificial Intelligence in Recruitment
We use AI enabled tools to help sort and review applications based on job related criteria. Final decisions regarding candidate progression are always made by a human recruiter.
Employment Equity
Levio subscribes to the principle of employment equity and applies an equal access employment program for women, Indigenous peoples, visible minorities, ethnic minorities, and persons with disabilities.
We value diversity and inclusion and are committed to creating a healthy, accessible, and rewarding work environment that highlights the unique contributions of our employees. Accommodations are available upon request for candidates participating in all aspects of the selection process.
Ready to apply?
Apply to Levio
Are you looking to thrive in a stimulating work environment?
Join Levio, a leader in digital transformation, and take your career to the next level. You will work alongside high-caliber professionals on ambitious, large-scale technology projects, directly embedded in our clients’ environments. At Levio, we value expertise, curiosity, and continuous improvement — and we give you the space to grow.
About the Role
The Data Protection & Privacy Architect is responsible for defining, governing, and implementing the enterprise architecture required to protect personal, sensitive, and regulated data throughout its lifecycle. This senior role ensures that privacy and data protection requirements are embedded into systems, applications, cloud platforms, analytics environments, and business processes by design and by default. The architect acts as a strategic advisor to executive leadership, legal, cybersecurity, IT, and business teams, ensuring compliance with privacy regulations while enabling secure and responsible data usage. The role will be remote.
Why Join Levio?
- Work on complex, high impact digital transformation projects
- Collaborate with experienced, multidisciplinary teams
- Continuously develop your technical and professional expertise
- Enjoy flexibility, autonomy, and a strong people first culture
- Be part of an organization that values diversity, inclusion, and innovation
Role and Responsibilities
Privacy & Data Protection Architecture
- Define and maintain enterprise privacy-by-design and privacy-by-default architectures.
- Architect data protection controls across applications, infrastructure, cloud, and data platforms.
- Establish standards for data classification, handling, retention, archiving, and secure destruction.
- Ensure consistent application of data protection controls across on-premise, cloud, and hybrid environments.
Regulatory & Governance Leadership
- Architect privacy governance frameworks aligned with GDPR, Quebec Law 25, PIPEDA, and ISO/IEC 27701.
- Define control baselines, assurance mechanisms, and compliance monitoring models.
- Support executive decision-making related to privacy risk, compliance posture, and regulatory exposure.
- Collaborate with legal, internal audit, and GRC teams to ensure regulatory alignment.
Data Security & Risk Management
- Architect encryption, key management, and secrets management strategies.
- Define data loss prevention (DLP) architectures and monitoring mechanisms.
- Ensure strong access controls and segregation of duties for sensitive data.
- Lead privacy risk assessments for complex systems, cloud platforms, AI solutions, and analytics environments.
Data Lifecycle & Enterprise Integration
- Architect solutions for data discovery, data mapping, and records of processing activities (RoPA).
- Ensure privacy requirements are integrated into SDLC, DevSecOps, and data engineering pipelines.
- Support privacy requirements for AI, machine learning, and advanced analytics use cases.
- Ensure auditability, traceability, and accountability of data usage.
Third-Party & Cloud Data Protection
- Define architectures for secure data sharing with third parties and vendors.
- Establish data protection requirements for outsourcing, SaaS, and cloud providers.
- Architect controls for cross-border data transfers and data residency requirements.
Incident & Breach Management (Privacy Context)
- Support design of data breach detection, response, and notification processes.
- Act as senior advisor during privacy incidents and regulatory reporting.
- Ensure evidence collection and documentation meet regulatory expectations.
Leadership & Advisory
- Act as the senior subject matter expert for data protection and privacy architecture.
- Mentor privacy analysts, GRC professionals, and security architects.
- Communicate privacy risks, architectural decisions, and mitigation strategies to executives and boards.
- Represent the organization with regulators, auditors, and external stakeholders when required.
Qualifications and Experience
- Deep expertise in data protection and privacy-by-design principles.
- Strong understanding of privacy regulations and standards: GDPR, Quebec Law 25, PIPEDA, ISO/IEC 27701
- Ability to design enterprise data protection architectures across: Applications, Databases, Cloud platforms, Data lakes and analytics environments
- Expertise in data classification, data mapping, and records of processing activities (RoPA).
- Strong knowledge of data security controls: Encryption (at rest, in transit, and in use), Key management systems (KMS, HSM), Tokenization, anonymization, and pseudonymization, Data Loss Prevention (DLP)
- Experience architecting identity and access controls for sensitive data: Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Privileged Access Management (PAM)
- Ability to design data retention, archiving, and secure data destruction strategies.
- Familiarity with cloud-native data protection and governance tools: Azure Purview / Microsoft Purview, AWS Macie, Google Cloud DLP
- Experience integrating privacy and data protection into: DLC and DevSecOps pipelines, Data engineering and analytics workflows
- Ability to assess privacy risks in AI, machine learning, and large-scale data processing systems.
- Strong understanding of logging, monitoring, auditability, and evidence collection.
- Experience with privacy management and GRC platforms: OneTrust, TrustArc, ServiceNow GRC
- CIPP/E, CIPP/C, CIPM, ISO/IEC 27701 Lead Implementer / Lead Auditor, CDPSE, CISSP (an asset)
Compensation (Ontario)
The salary range provided reflects a good faith estimate based on factors such as experience, technical expertise, location, and relevant certifications. Final compensation will be determined according to the specific circumstances of each candidate.
Estimated salary range: $110,000 to $150,000 per year.
This posting is a current hiring need.
Benefits and Work Environment
Levio offers a comprehensive and flexible benefits package designed to support your professional growth and personal wellbeing, including:
- 4 weeks of cumulative vacation starting from day one
- Flexible working hours
- Professional Development Allowance (PDA) for training, computer equipment, and physical activities
- Training tailored to your areas of expertise
- Registered Retirement Savings Plan (RRSP) with employer contribution up to 3% of gross salary
- Modular group insurance plan
- Public transportation or parking reimbursement when required
- Referral bonuses
- 11 statutory holidays
- Personal days
- An active social life (5to7 events, social club, healthy snacks, coffee, and more)
Position Details
- Employment type: Full time, permanent
Notice on the Use of Artificial Intelligence in Recruitment
We use AI enabled tools to help sort and review applications based on job related criteria. Final decisions regarding candidate progression are always made by a human recruiter.
Employment Equity
Levio subscribes to the principle of employment equity and applies an equal access employment program for women, Indigenous peoples, visible minorities, ethnic minorities, and persons with disabilities.
We value diversity and inclusion and are committed to creating a healthy, accessible, and rewarding work environment that highlights the unique contributions of our employees. Accommodations are available upon request for candidates participating in all aspects of the selection process.
Ready to apply?
Apply to Levio
Cybersecurity GRC Manager
Share this job
Cerebras Systems builds the world's largest AI chip, 56 times larger than GPUs. Our novel wafer-scale architecture provides the AI compute power of dozens of GPUs on a single chip, with the programming simplicity of a single device. This approach allows Cerebras to deliver industry-leading training and inference speeds and empowers machine learning users to effortlessly run large-scale ML applications, without the hassle of managing hundreds of GPUs or TPUs.
Cerebras' current customers include top model labs, global enterprises, and cutting-edge AI-native startups. OpenAI recently announced a multi-year partnership with Cerebras, to deploy 750 megawatts of scale, transforming key workloads with ultra high-speed inference.
Thanks to the groundbreaking wafer-scale architecture, Cerebras Inference offers the fastest Generative AI inference solution in the world, over 10 times faster than GPU-based hyperscale cloud inference services. This order of magnitude increase in speed is transforming the user experience of AI applications, unlocking real-time iteration and increasing intelligence via additional agentic computation.
About The Role
The Cybersecurity GRC Manager is accountable for maturing and scaling engineering-driven governance, risk, and compliance programs that support the security, privacy, and regulatory-compliant posture of the organization. The ideal candidate will bring a unique blend of deep technical security acumen and GRC expertise, enabling the creation of GRC workflows that are measurable, automated, and resilient. This is a strategic, cross-functional, and customer-facing role reporting to the Director of Governance, Risk, & Compliance.
A successful candidate will have a comprehensive understanding of cybersecurity and privacy industry frameworks (e.g., NIST, ISO, SOC 2, CCPA, GDPR, HIPAA). They will be responsible for transforming governance, risk, and compliance practices into proactive, testable capabilities using automation, continuous auditing, and AI-driven solutions.
Proficiency with AI tools (LLMs, prompt engineering, generative‑AI workflows) is a core requirement – you’ll use AI to streamline GRC workflow creation and implementation, evidence generation, and security risk mitigation. Experience with designing and implementing autonomous “agentic AI” solutions is preferred.
Responsibilities
- Drive a compliance operating model that includes automated control testing, self-service reporting, and AI-enhanced risk analysis. Implement continuous control monitoring and evidence collection pipelines integrated into cloud-native and on-prem environments.
- Partner with engineering and product teams to define and codify security and compliance requirements as part of the SDLC. Introduce automated security/compliance tests into CI/CD pipelines to support shift-left practices.
- Use generative AI for compliance gap detection, policy mapping, risk triaging, and customer assurance functions.
- Oversee security and privacy assurance activities and assessments, internal/external audits, and attestation/certification initiatives (e.g., SOC 2, ISO 27001). Lead internal readiness for third-party audits and external assessments and maintain ongoing compliance posture.
- Utilize automation and GRC platforms to optimize gathering and maintenance of audit readiness documentation and audit evidence.
- Utilize AI-driven solutions to manage the organization’s responses to customers’ and partners’ cybersecurity requests (e.g. information security questionnaires).
- Enhance and execute third-party security risk management practices, including inherent / residual security risk assessment, vendor / supplier security due diligence reviews, vendor / supplier inventory management, ongoing security monitoring, and risk reporting.
- Build and maintain enterprise-level risk registers; facilitate and monitor security risk acceptance processes; design and maintain security risk measurement and monitoring including risk reporting.
- Grow and expand cybersecurity guidance through development and maintenance of cybersecurity policies, standards, and procedures.
- Manage security awareness programs through administration of regular security trainings, phishing simulations, and corporate communications.
Skills And Qualifications
Required Experience
- Bachelor’s degree in computer science, Cybersecurity, or related engineering field; advanced degree preferred.
- Minimum 5 years of progressive experience in cybersecurity, security engineering, and/or risk management.
- Proven success managing compliance programs in cloud-native, SaaS/PaaS environments with high automation maturity.
- Demonstrated ability to manage customer-facing compliance engagements and audit preparation.
Technical and Domain Expertise
- Deep knowledge of, and experience working with, industry frameworks (NIST SP800-53, ISO 27001, SOC 2, CCPA, GDPR, HIPAA).
- Strong familiarity with AI/ML usage in security programs and risk analysis.
- Experience implementing and administering GRC tools/platforms.
- Proficiency in cloud security, AI security, secure development / DevSecOps practices, and infrastructure-as-code (IaC) security tooling.
- Experience implementing automated compliance and control validation pipelines.
Soft Skills
- Excellent communication, stakeholder management, and executive reporting skills.
- Ability to influence cross-functional teams and operate in fast-paced, high-growth environments.
- Strong analytical, critical thinking, and decision-making capabilities.
Why Join Cerebras
People who are serious about software make their own hardware. At Cerebras we have built a breakthrough architecture that is unlocking new opportunities for the AI industry. With dozens of model releases and rapid growth, we’ve reached an inflection point in our business. Members of our team tell us there are five main reasons they joined Cerebras:
- Build a breakthrough AI platform beyond the constraints of the GPU.
- Publish and open source their cutting-edge AI research.
- Work on one of the fastest AI supercomputers in the world.
- Enjoy job stability with startup vitality.
- Our simple, non-corporate work culture that respects individual beliefs.
Read our blog: Five Reasons to Join Cerebras in 2026.
Apply today and become part of the forefront of groundbreaking advancements in AI!
Cerebras Systems is committed to creating an equal and diverse environment and is proud to be an equal opportunity employer. We celebrate different backgrounds, perspectives, and skills. We believe inclusive teams build better products and companies. We try every day to build a work environment that empowers people to do their best work through continuous learning, growth and support of those around them.
This website or its third-party tools process personal data. For more details, click here to review our CCPA disclosure notice.
Ready to apply?
Apply to Cerebras Systems