Manager, GRC
About the role
Overview
At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.
Our Technology Risk Services team is growing and we are looking for a Manager, GRC to join our team in Toronto. The Technology Risk Services practice provides a variety of services to our clients. The successful candidate will focus primarily on performing IT internal audit and IT risk advisory engagements. They will also be involved with managing engagements and training our junior staff.
What You Will Do
Architecture and Delivery
Define enterprise GRC target architecture and solution blueprints (data models, taxonomy, control libraries, business hierarchy, workflows, RBAC). Lead complex use cases Enterprise/Operational Risk, Resilience, Regulatory Compliance, Policy, IT/Cyber Risk, Vulnerability, Third Party Risk, Audit, Issues/Remediation, Business Continuity, Risk Analytics. Perform hands-on configuration/customization across enterprise GRC technologies including custom objects, forms, workflows, reporting.
Technical Implementation and Integration
Implement end-to-end cloud solutions OOTB package deployment, environment provisioning, platform hardening. Build APIs/data pipelines; design event-driven integrations for continuous control monitoring and real-time risk insights. Lead data migration/normalization/lineage; enable control testing automation and risk quantification reporting.
Governance, Methodology, and PMO
Establish Agile SDLC, program governance, RAID, and executive dashboards. Design operating models (RACI, roles/processes, governance committees, three-lines model, control ownership, issue management). Maintain GRC taxonomy risk/control libraries, policies, authority documents, obligations mapping, evidence repositories.
Advisory, Enablement, and Change Management
Advise on regulations and frameworks; create compliance mappings and control rationalization. Deliver enablement (admin/end-user training, playbooks, SOPs, knowledge transfer). Drive adoption via stakeholder engagement, champions, benefits tracking; define KPIs for risk posture, compliance maturity, efficiency.
Practice Development and Thought Leadership
Develop accelerators, reference architectures, integration patterns, configuration blueprints. Publish thought leadership, lead demos/POCs, support RFPs/solutioning; mentor junior staff. Evaluate emerging capabilities (AI/ML analytics, control automation, continuous monitoring) and guide roadmaps.
What You Bring To The Role
5–8 years in Risk Management with GRC specialization; proven lead architect/SME on multi-platform engagements. End-to-end cloud GRC delivery on MetricStream, Archer, ServiceNow IRM/Compliance, AuditBoard, Workiva. Experience installing/configuring MetricStream, Archer, and ServiceNow IRM/Compliance, AuditBoard, Workiva. Identity and access LDAP/AD, SAML/OAuth/OIDC, role-based access and entitlements. Technical skills Java, JavaScript; REST/SOAP, JSON/XML; Python/PowerShell; SQL. Agile SDLC leadership; PMO-level governance, risk, and benefits tracking. Prefered Certifications ServiceNow. Knowledge of FAIR risk quantification, BI/analytics (Power BI/Tableau), continuous control monitoring. Experience with Azure/AWS/GCP and security architectures for GRC integrations. Advisory presence; strong stakeholder management and communication. Advanced problem-solving and solution architecture; ability to scale complex requirements. Cross-functional leadership, mentoring, and consensus-building across business, risk, audit, and technology teams.
KPMG Ontario Region Pay Range Information
The expected base salary range for this position is $98,000 to $139,500 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.
Providing you with the support you need to be at your best
Our Values, The KPMG Way
Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters
KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.
Adjustments and accommodations throughout the recruitment process
At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.
AI Usage
We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.
We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.
About KPMG
KPMG is a global network of professional firms providing Audit, Tax and Advisory services. We have 273,000 outstanding professionals working together to deliver value in 143 countries and territories. With a worldwide presence, KPMG continues to build on our successes thanks to clear vision, defined values and, above all, our people.
Our industry focus helps KPMG firms’ professionals develop a rich understanding of clients' businesses and the insight, skills and resources required to address industry-specific issues and opportunities.
The independent member firms of the KPMG network are affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Each KPMG firm is a legally distinct and separate entity and describes itself as such.
Similar Jobs
Manager, GRC
About the role
Overview
At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.
Our Technology Risk Services team is growing and we are looking for a Manager, GRC to join our team in Toronto. The Technology Risk Services practice provides a variety of services to our clients. The successful candidate will focus primarily on performing IT internal audit and IT risk advisory engagements. They will also be involved with managing engagements and training our junior staff.
What You Will Do
Architecture and Delivery
Define enterprise GRC target architecture and solution blueprints (data models, taxonomy, control libraries, business hierarchy, workflows, RBAC). Lead complex use cases Enterprise/Operational Risk, Resilience, Regulatory Compliance, Policy, IT/Cyber Risk, Vulnerability, Third Party Risk, Audit, Issues/Remediation, Business Continuity, Risk Analytics. Perform hands-on configuration/customization across enterprise GRC technologies including custom objects, forms, workflows, reporting.
Technical Implementation and Integration
Implement end-to-end cloud solutions OOTB package deployment, environment provisioning, platform hardening. Build APIs/data pipelines; design event-driven integrations for continuous control monitoring and real-time risk insights. Lead data migration/normalization/lineage; enable control testing automation and risk quantification reporting.
Governance, Methodology, and PMO
Establish Agile SDLC, program governance, RAID, and executive dashboards. Design operating models (RACI, roles/processes, governance committees, three-lines model, control ownership, issue management). Maintain GRC taxonomy risk/control libraries, policies, authority documents, obligations mapping, evidence repositories.
Advisory, Enablement, and Change Management
Advise on regulations and frameworks; create compliance mappings and control rationalization. Deliver enablement (admin/end-user training, playbooks, SOPs, knowledge transfer). Drive adoption via stakeholder engagement, champions, benefits tracking; define KPIs for risk posture, compliance maturity, efficiency.
Practice Development and Thought Leadership
Develop accelerators, reference architectures, integration patterns, configuration blueprints. Publish thought leadership, lead demos/POCs, support RFPs/solutioning; mentor junior staff. Evaluate emerging capabilities (AI/ML analytics, control automation, continuous monitoring) and guide roadmaps.
What You Bring To The Role
5–8 years in Risk Management with GRC specialization; proven lead architect/SME on multi-platform engagements. End-to-end cloud GRC delivery on MetricStream, Archer, ServiceNow IRM/Compliance, AuditBoard, Workiva. Experience installing/configuring MetricStream, Archer, and ServiceNow IRM/Compliance, AuditBoard, Workiva. Identity and access LDAP/AD, SAML/OAuth/OIDC, role-based access and entitlements. Technical skills Java, JavaScript; REST/SOAP, JSON/XML; Python/PowerShell; SQL. Agile SDLC leadership; PMO-level governance, risk, and benefits tracking. Prefered Certifications ServiceNow. Knowledge of FAIR risk quantification, BI/analytics (Power BI/Tableau), continuous control monitoring. Experience with Azure/AWS/GCP and security architectures for GRC integrations. Advisory presence; strong stakeholder management and communication. Advanced problem-solving and solution architecture; ability to scale complex requirements. Cross-functional leadership, mentoring, and consensus-building across business, risk, audit, and technology teams.
KPMG Ontario Region Pay Range Information
The expected base salary range for this position is $98,000 to $139,500 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.
Providing you with the support you need to be at your best
Our Values, The KPMG Way
Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters
KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.
Adjustments and accommodations throughout the recruitment process
At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.
AI Usage
We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.
We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.
About KPMG
KPMG is a global network of professional firms providing Audit, Tax and Advisory services. We have 273,000 outstanding professionals working together to deliver value in 143 countries and territories. With a worldwide presence, KPMG continues to build on our successes thanks to clear vision, defined values and, above all, our people.
Our industry focus helps KPMG firms’ professionals develop a rich understanding of clients' businesses and the insight, skills and resources required to address industry-specific issues and opportunities.
The independent member firms of the KPMG network are affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Each KPMG firm is a legally distinct and separate entity and describes itself as such.