Information Security Manager, Mergers & Acquisitions

Job Description

What if you could redefine what’s possible? With us, you can. We are the home of ambitious, passionate, and innovative world shapers. With an unmatched breadth and depth of engineering, advisory and science‑based expertise, our global minds unite to power local solutions. We are pathfinders and impact makers. We are Visioneers. We are WSP.

The Opportunity

Drive Secure Growth Through Strategic Transformation

Play a pivotal role in shaping secure business growth as an Information Security Manager, Mergers & Acquisitions. In this role, you will lead critical security due diligence, risk evaluation, and integration efforts across acquisitions, divestitures, and joint ventures—ensuring every transaction aligns with WSP’s security framework and risk posture.

You’ll collaborate with Corporate Development, Legal, IT, and executive stakeholders to assess, advise, and integrate security practices within a fast‑paced, deal‑driven environment, directly influencing the success and resilience of strategic business initiatives across Canada.

Your Impact

• Lead information security due diligence activities for mergers, acquisitions, and divestitures.
• Perform pre‑acquisition security risk assessments, including evaluation of policies, controls, technologies, and cyber maturity.
• Identify key security risks, liabilities, and remediation requirements, including regulatory, contractual, and operational risks.
• Work with security penetration testing vendors to coordinate, track, and evaluate penetration testing activities, as well as remediation schedules.
• Coordinate breach assessment activities in line with transaction schedules.
• Provide clear, actionable risk reports and executive‑level summaries to support transaction decision‑making.
• Support deal teams in defining security‑related representations, warranties, and contractual requirements.
• Work with M&A Operations to develop and maintain security integration playbooks and frameworks aligned with WSP standards.
• Define Day 1 security expectations as well as day 30/60/90 security integration plans where necessary, including identity, network, endpoint, data protection, and monitoring controls.
• Coordinate the execution of security integration activities across IT, infrastructure, and business teams.
• Ensure alignment of acquired entities to WSP’s security policies, standards, and ISO27001‑aligned ISMS.
• Track and report on integration progress, risks, and remediation activities.
• Ensure M&A activities are aligned with WSP’s Information Security Governance framework and risk management processes.
• Act as the primary security advisor for M&A initiatives, providing guidance on risk acceptance, mitigation strategies, and prioritization.
• Maintain documentation and audit trail supporting due diligence decisions and integration activities.
• Participate in governance forums and provide updates on transaction‑related security risks and status.
• Develop strong working relationships with Corporate Development, Legal, IT, and regional business leadership.
• Act as the central coordination point for all security‑related M&A activities.
• Communicate complex security risks and integration strategies clearly to both technical and non‑technical stakeholders.
• Support client‑facing or third‑party interactions where required during transactions.
• Assess third‑party and inherited vendor risks associated with acquired entities.
• Ensure appropriate risk treatment plans are defined and executed for high/critical risks.
• Align acquired third‑party relationships with WSP’s third‑party cyber risk management framework.
• Develop and enhance M&A security assessment methodologies, tools, and templates.
• Contribute to the evolution of WSP’s security standards, policies, and playbooks based on lessons learned.
• Identify opportunities to streamline and automate assessment and integration processes.
• Support awareness and training initiatives related to M&A security risks across the organization.

The Skills That Set You Apart

• Bachelor’s degree in Information Technology, Computer Science, Business, Risk Management, or a related field (or equivalent experience).
• 4–8 years of experience in information security, IT risk, or cybersecurity, including at least 2 years supporting M&A security due diligence or integration.
• Proven experience leading security risk assessments, control evaluations, and compliance activities.
• Strong project management skills with the ability to lead multiple concurrent workstreams end‑to‑end independently.
• Working knowledge of ISO 27001, NIST CSF, and CIS Controls.
• Broad expertise across core security domains including IAM, network and endpoint security, data protection, vulnerability management, and monitoring.
• Experience in third‑party/vendor risk management and security assessment methodologies.
• Strong communication, stakeholder engagement, and analytical skills with the ability to operate in fast‑paced environments.

Why Choose WSP

• Proudly Canadian – we are a Top 100 Employer in Canada for 2026.
• A global community of brilliant minds – your next idea, mentor, or opportunity is always within reach.
• Limitless opportunities start here. Whether it’s across the country or around the globe, we help you tailor your role to match your ambition — because your growth drives ours.
• Flexible work, real balance – we recognize the importance of balance in our lives and encourage you to prioritize the balance in yours.

Compensation

AB, BC, NT, NU, SK & YT: $135,200 - $179,100

MB & ON: $123,300 - $169,800

NB, NL, NS, PE & QC: $122,100 - $162,200

The final salary awarded for this role may vary from the above range based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, and business or organizational needs. The wage range provided in this job posting may be subject to change for business purposes.

Ready to Drive Secure Growth?

Join WSP and play a critical role in enabling secure, strategic business transformation. Your expertise will directly shape how we evaluate risk, integrate new organizations, and safeguard our future. Apply today and help redefine what secure growth looks like.

About Us

At WSP, we exist to shape communities to advance humanity. It’s why we bring people together who are wired to solve complex challenges – engineers, scientists, advisors, and technical experts who are driven by a common passion – to redefine what’s possible and shape what comes next. We are Visioneers. As one of the world’s leading professional services firms, we partner with clients across transportation, infrastructure, environment, buildings, energy, water, mining and metals. We pair deep local knowledge with global insights to pioneer solutions designed to leave a lasting, positive impact. At WSP, you’ll join a community of brilliant minds that push boundaries every day - applying deep expertise and fuelling innovation to help create a more connected and resilient future. Here, your ideas are valued, your growth is supported, and you are encouraged to bring your authentic self to work. We empower our people to collaborate across disciplines, challenge the status quo, and shape a career with purpose. Join us.

Health and Safety is a core paramount value of WSP. Given the importance of keeping one another safe it is expected that you comply with our Health, Safety & Environment (HSE) policy at all times as well as client HSE policies when working at client locations. Full details here . Some safety‑sensitive positions involve fieldwork and may include work in a variety of environmental conditions, such as remote or isolated areas, working alone, and in inclement weather (within safe and reasonable limits). WSP welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. WSP is committed to the principles of employment equity. Only the candidates selected will be contacted. WSP does not accept unsolicited resumes from agencies. Full details here .

#J-18808-Ljbffr