Manager, Information Security

Who We Are Konrad is a next-generation digital consultancy. We are dedicated to solving complex business problems for our global clients with creative and forward-thinking solutions. Our employees enjoy a culture built on innovation and a commitment to creating best-in-class digital products in use by hundreds of millions of consumers around the world. We hire exceptionally smart, analytical, and hard-working people who are lifelong learners. About The Role As the Manager, Information Security, you will contribute to the strategic and operational security initiatives that protect Konrad and the work we deliver for our clients. With a strong focus on IT security, you'll play a central role in safeguarding our internal tools, systems, and infrastructure against emerging threats, while contributing to the broader information security practices that keep our people, data, and client engagements secure. You'll also help align our internal security posture with the compliance requirements of the world's most recognizable brands, ensuring what we deliver meets or exceeds enterprise-level security standards. You're a strong contributor and hands-on practitioner who can navigate complex regulatory landscapes, communicate clearly with both technical teams and executive stakeholders, and champion a culture of security-first thinking. Working across the organization, you'll embed security best practices into how we operate internally and how we deliver for our clients, helping some of the world's top businesses and brands build digital experiences that shape the global economy. Please note: This role requires an in-person presence at our Toronto office 4 days a week to foster collaboration and hands-on leadership. What You'll Do Develop, implement, and maintain IT security strategies and policies that protect Konrad's internal tools, systems, and proprietary data. Support compliance efforts to keep our infrastructure and project delivery aligned with client security requirements and industry frameworks like SOC 2 and ISO 27001. Serve as a key point of contact for client security assessments and questionnaires, confidently representing Konrad's security posture to enterprise stakeholders. Assist with security audits, risk assessments, and vulnerability management programs, proactively identifying and mitigating risk. Collaborate closely with IT, engineering, product, and consulting teams to integrate security best practices into internal operations and client delivery. Qualifications 5-7 years of progressive experience in IT and information security. Proven track record of managing internal IT security and compliance programs, preferably within a digital agency, technology, or consulting environment. Deep familiarity with common security frameworks and regulatory standards such as SOC 2, ISO 27001, GDPR, and CCPA. Strong technical background, with hands-on understanding of cloud security, network architecture, access management, and secure software development practices. Exceptional communication and negotiation skills, with the ability to articulate complex security concepts to both technical teams and non-technical client executives. Industry-recognized security certifications such as CISSP, CISM, or CISA are a strong asset. Ability to work collaboratively and in-person from our Toronto office four days per week. Perks and Benefits Comprehensive Health & Wellness Benefits Package Retirement Planning Parental Leave Program Flexible Working Hours Work from Home Flexibility (1 day per week) Service Recognition Programs Socials, Outings & Retreats Culture of Learning & Development Bonus Points Have you taken any courses at BrainStation ? A lot of our design and development best practices and processes are taught during our courses - make sure to highlight this experience in your cover letter if you have! Konrad is committed to maintaining a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants,…