Senior Manager, Information Security

Who We Are

Konrad is a next-generation digital consultancy. We are dedicated to solving complex business problems for our global clients with creative and forward-thinking solutions. Our employees enjoy a culture built on innovation and a commitment to creating best-in-class digital products in use by hundreds of millions of consumers around the world. We hire exceptionally smart, analytical, and hard-working people who are lifelong learners.

About The Role

As the Senior Manager, Information Security, you will help lead the strategic and operational security initiatives that protect Konrad and the work we deliver for our clients. With a strong focus on IT security, you'll play a central role in safeguarding our internal tools, systems, and infrastructure against emerging threats, while contributing to the broader information security practices that keep our people, data, and client engagements secure. You'll also help align our internal security posture with the compliance requirements of the world's most recognizable brands, ensuring what we deliver meets or exceeds enterprise-level security standards.

You're a strong leader and hands-on practitioner who can navigate complex regulatory landscapes, communicate clearly with both technical teams and executive stakeholders, and champion a culture of security-first thinking. Working across the organization, you'll embed security best practices into how we operate internally and how we deliver for our clients, helping some of the world's top businesses and brands build digital experiences that shape the global economy.

Please note: This role requires an in-person presence at our Toronto office 4 days a week to foster collaboration and hands-on leadership.

What You'll Do

Develop, implement, and maintain IT security strategies and policies that protect Konrad's internal tools, systems, and proprietary data.

Lead compliance efforts to keep our infrastructure and project delivery aligned with client security requirements and industry frameworks like SOC 2 and ISO 27001.

Serve as a key point of contact for client security assessments and questionnaires, confidently representing Konrad's security posture to enterprise stakeholders.

Manage security audits, risk assessments, and vulnerability management programs, proactively identifying and mitigating risk.

Collaborate closely with IT, engineering, product, and consulting teams to integrate security best practices into internal operations and client delivery.

Qualifications

8+ years of progressive experience in IT and information security.

Proven track record of managing internal IT security and compliance programs, preferably within a digital agency, technology, or consulting environment.

Deep familiarity with common security frameworks and regulatory standards such as SOC 2, ISO 27001, GDPR, and CCPA.

Strong technical background, with hands-on understanding of cloud security, network architecture, access management, and secure software development practices.

Exceptional communication and negotiation skills, with the ability to articulate complex security concepts to both technical teams and non-technical client executives.

Industry-recognized security certifications such as CISSP, CISM, or CISA are a strong asset.

Ability to work collaboratively and in-person from our Toronto office four days per week.

Perks and Benefits

Comprehensive Health & Wellness Benefits Package

Retirement Planning

Parental Leave Program

Flexible Working Hours

Work from Home Flexibility (1 day per week)

Service Recognition Programs

Socials, Outings & Retreats

Culture of Learning & Development

Bonus Points

Have you taken any courses at BrainStation? A lot of our design and development best practices and processes are taught during our courses - make sure to highlight this experience in your cover letter if you have!

The estimated compensation for this position is $120,000 to $150,000. This is an estimate and a compensation offer will vary based on applicant’s education, experience, skills, abilities and alignment with market data.

While we sincerely appreciate all applications, only those candidates selected for an interview will be contacted.

#LI-Hybrid