{"id":2340918,"url":"https://alion.io/job/nesto-manager-security-grc","title":"Manager, Security GRC","company":{"id":179546,"name":"Nesto","domain":"nesto.ca","url":"https://alion.io/company/nesto-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":91,"open_postings":19,"ghost_share":0,"stale_share":0.158,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Management","role_family":"Management","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":78000,"max_usd":124000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":54},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Rest API","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-22T00:04:55Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-12T21:13:48Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"About Us\nNesto Cloud is Canada's cloud-native and AI driven, end-to-end mortgage technology platform, helping financial institutions modernize lending through AI intelligent automation, AI & Cloud proprietary technology, and business process outsourcing (BPO) solutions.\nPowered by the Nesto Group ecosystem, we transform decades of mortgage expertise into cutting-edge technology that reduces mortgage operation costs, accelerates lending, strengthens compliance, and delivers exceptional experiences for lenders and borrowers alike.\nNesto Group\nNesto Group is Canada's leading provider of mortgage technology and financing solutions, with more than CAD $80 billion in residential and commercial mortgages under administration. Trusted by many of the country's leading financial institutions, we combine over 50 years of mortgage expertise with proprietary cloud and AI technology to transform the future of lending.\nPowered by our proprietary cloud and AI technology, nesto has become one of Canada's fastest-growing mortgage lenders, gaining market share across direct-to-consumer (D2C) residential lending, the broker channel, and multi-family commercial lending. Recognized as one of Deloitte's Fast 50 companies for three consecutive years, we continue to push the industry forward through innovation, technology, and customer-focused solutions.\nOperating through our family of brands-CMLS,nesto, andNesto Cloud -our mission is to build Canada's mortgage ecosystem of the future and create a true Canadian champion in lending technology and financial services. Learn more at: https://nestogroup.ca/\nLife at Nesto Cloud\nAt Nesto Cloud, you'll build the future of lending alongside some of the country's top developers, AI engineers, and mortgage experts. You'll work with a modern tech stack and AI-driven development frameworks designed to help you innovate, grow your skills, and accelerate your career\nAbout the role\nThe Security GRC Manager owns nesto's governance, risk, and compliance program end-to-end. We've built strong foundations and automated much of our compliance workflow; your role is to elevate it to world-class execution. You'll optimize our automated systems, refine audit readiness processes, enhance policy governance rigor, strengthen risk management discipline, and scale vendor assessment workflows. You're taking a program that works and making it exceptional, resilient, and repeatable.\nWhat you'd be accomplishing in that role :\nOwn Security policy governance and control mapping across nesto's compliance frameworks (SOC 1/2, ISO 27001, and applicable regulatory frameworks). \nMature our automated compliance program to scale sustainably with nesto's growth. Optimize our GRC platform, automation tools for self-service workflows, and progressively eliminate manual audit prep. \nElevate nesto's external audit program while continuously expanding scope as the business scales.\nEvolve nesto's AI governance framework in collaboration with Engineering, and Compliance teams from foundational policies to enterprise-grade controls that enable rapid, safe AI feature deployment and internal usage. \nTransform risk management into a strategic business advisor. Collaborate with business unit leaders to evolve our risk narratives, connect technical findings to business impact, and enable leadership to make informed trade-offs with confidence.\nScale vendor and client security assessments. Evolve intake workflows, mature questionnaire automation, and strengthen how we communicate security posture to enterprise prospects and customers.\nLead and develop a GRC team that raises the bar on technical excellence, deepens capability in governance and risk disciplines, and drives accountability across initiatives.\nStrengthen organizational resilience through evolved, regularly tested Business Continuity and Disaster Recovery frameworks that keep nesto operationally confident during crisis.\nWhat We’re Looking For\n10+ years of GRC, audit, risk management, or compliance experience in regulated industries (financial services, SaaS, healthcare)\nDeep experience across SOC1, SOC2, NIST frameworks and audits. \nStrong knowledge of risk assessment methodologies and compliance operations.\nHands-on experience with GRC automation platforms.\nExcellent project management, stakeholder engagement, and cross-functional collaboration skills\nStrong writing skills; ability to communicate policy and control concepts clearly to technical and non-technical audiences\nAbility to influence leadership through evidence-based risk narratives and business-aligned insights\n**English is required for writing and documentation. French speaking and reading is a strong plus.*\nThe Reward\nThe A-Team: Work alongside high-performing talent in the industry.\nAccelerated Growth: The slope of your learning curve here will be vertical. You will touch more production systems in one year than you would in five years at a bank.\nTop-Tier Coverage: Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited access to telemedicine and mental health services for you and your family.\nRest & Recharge: 4 weeks of vacation to ensure you stay at peak performance.\nBest-in-Class Tools: Access to the resources and tech you need to execute without friction.\nWorking framework: The environment that makes you productive and enables teamwork (Hybrid model).\nDiversity and Inclusion\nAt nesto, we believe that creativity and collaboration are the result of a diverse team. We are committed to fostering a culture of diversity, equity, inclusion, and belonging, and we strongly encourage women, people of color, LGBTQIA+ individuals, and individuals with disabilities to apply. We are committed to creating a workplace that is inclusive and welcoming to all.","description_format":"text","description_chars":5781,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-12T11:18:26Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":21,"expected_fill_days":74,"reasons":["conf:3","win:early"],"computed_at":"2026-10-13T00:22:48Z"},"pay":null,"html_url":"https://alion.io/job/nesto-manager-security-grc","json_url":"https://alion.io/job/nesto-manager-security-grc.json","meta":{"generated_at":"2026-10-13T00:22:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179546},"rest":"https://alion.io/mcp/rest/get_company?id=179546"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnesto-manager-security-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnesto-manager-security-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnesto-manager-security-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nesto-manager-security-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnesto-manager-security-grc"}]}