Senior Manager, Cybersecurity & GRC
- Mississauga, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Experience
- 12+ years of cybersecurity/information security experience.
- Posting language
- English
- Posted
Original job description
We are seeking a strategic Senior Manager, Cybersecurity & GRC to lead cybersecurity strategy, governance, risk, compliance, and continuous improvement initiatives. This role will partner with executive leadership and oversee key areas including GRC, SOC/MSSP, incident response, cyber resilience, cloud security, third-party risk, and AI security.
Key Responsibilities
- Develop and execute the enterprise cybersecurity strategy and roadmap.
- Lead GRC, risk assessments, policies, controls, compliance, and audit programs.
- Advise CIO, executives, and senior stakeholders on cybersecurity risks and priorities.
- Oversee SOC/MSSP, incident response, vulnerability management, and cyber resilience.
- Establish security governance for AI, GenAI, cloud, and emerging technologies.
- Lead third-party and supply-chain cybersecurity risk management.
- Develop cybersecurity KPIs/KRIs, budgets, business cases, and investment priorities.
- Lead and mentor cybersecurity teams and drive continuous security improvement.
Qualifications
- 12+ years of cybersecurity/information security experience.
- 5+ years in a leadership/management role.
- Strong experience in Cybersecurity Strategy, GRC, Enterprise Risk, and Security Assurance.
- Experience with SOC/MSSP oversight, incident response, cloud security, and compliance.
- Strong knowledge of NIST, ISO 27001, CIS Controls, and SOC 2.
- Experience presenting cybersecurity strategy and risk to executive leadership.
- Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field.
- CISSP, CISM, CRISC, CCSP, or GIAC certification is an asset.
If you're a senior cybersecurity leader with strong GRC and strategic experience, we'd like to hear from you.
More about this job
Responsibilities
Lead the enterprise cybersecurity strategy, governance, risk, and compliance initiatives while partnering with executive leadership. Oversee critical security operations including SOC/MSSP, incident response, cloud security, and AI governance.
Requirements
Requires over 12 years of cybersecurity experience with at least 5 years in a leadership role and a bachelor's degree in a technical field. Proficiency in GRC frameworks like NIST and ISO 27001, along with professional certifications such as CISSP or CISM, is highly valued.
Skills
- Cybersecurity Strategy
- Governance Risk and Compliance (GRC)
- Enterprise Risk Management
- Security Assurance
- SOC/MSSP Oversight
- Incident Response
- Cloud Security
- Third-Party Risk Management
- AI Security
- Vulnerability Management
- Cyber Resilience
- NIST
- ISO 27001
- CIS Controls
- SOC 2
- Executive Stakeholder Management
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Management & Leadership
- Transportation
- Consulting
Keywords
- Cybersecurity
- GRC
- Enterprise Risk
- SOC
- MSSP
- Incident Response
- Cyber Resilience
- Cloud Security
- Third-Party Risk
- AI Security
- GenAI
- NIST
- ISO 27001
- CIS Controls
- SOC 2
- CISSP
- CISM
- CRISC
- CCSP
- GIAC
- KPI
- KRI
- Vulnerability Management
- Supply-Chain Risk
- Airlines and Aviation