N

nesto

AI-powered mortgage lender with unbiased advice

GRC Security Manager

Security Governance, Risk & ComplianceUpdated on Nov 13
Full-timeRemote in Canada

About the Job

Requirements

  • More than 10 years of experience in GRC, audit, risk management, or compliance in regulated industries such as financial services, SaaS, or healthcare.
  • Strong command of SOC 1, SOC 2, and NIST frameworks and audits.
  • Strong knowledge of risk assessment methodologies and compliance operations.
  • Hands-on experience with GRC automation platforms.
  • Project management, stakeholder engagement, and cross-functional collaboration skills.
  • Strong writing skills and the ability to communicate policy and control concepts clearly to technical and non-technical audiences.
  • Ability to influence leadership through evidence-based risk analysis and perspectives aligned with business objectives.
  • English proficiency is required for writing and documentation.

Responsibilities

  • Own security policy governance and control mapping across nesto's compliance frameworks, including SOC 1/2, ISO 27001, and applicable regulatory frameworks.
  • Mature the automated compliance program to scale sustainably with nesto's growth; optimize the GRC platform and automation tools for self-service workflows while phasing out manual audit preparation.
  • Improve the quality of nesto's external audit program while continually expanding its scope as the company grows.
  • Evolve nesto's AI governance framework in collaboration with engineering and compliance teams, advancing from foundational policies to enterprise-level controls that enable rapid and secure deployment and internal use of AI-based features.
  • Transform risk management into a strategic business advisor by collaborating with business-unit leaders to evolve risk analyses, connect technical findings to business impacts, and enable leadership to make informed trade-offs.
  • Scale vendor and customer security assessments by evolving intake workflows, improving questionnaire automation, and strengthening communication of the security posture to prospects and major customers.
  • Lead and develop a GRC team, raising standards of technical excellence, deepening governance and risk-management capabilities, and fostering accountability across initiatives.
  • Strengthen organizational resilience through mature, regularly tested business continuity and disaster recovery frameworks.

Desired Qualifications

  • French proficiency in speaking and reading is a strong asset.

About the Company

nesto

AI-powered mortgage lender with unbiased advice

Nesto is a Canadian online mortgage lender that uses technology to simplify the mortgage process. It offers mortgage options through an AI-powered algorithm that estimates the best rate in seconds, then lets customers customize based on personal goals. The application process is straightforward, with easy document uploads for review. Nesto differentiates itself by providing unbiased, commission-free expert advice from a team of over 300 advisors across Canada, helping clients from start to finish and during the life of their loan. Revenue comes from the interest on mortgages, and the company has helped over 400,000 Canadians. Its goal is to make the mortgage experience transparent and customer-friendly by combining advanced technology with accessible expert guidance.

Company size
501-1,000
Company stage
Series E
Total funding
$222.6M
Headquarters
Montreal, Canada
Founded
2018

Recently Posted Jobs

Explore more opportunities at nesto

See more jobs