Job Title: Manager, Cyber Security Governance Location :C09 - Richview TS - 65 Kelfield Street, Rexdale, ON M9W 5A3 Hiring salary range: $110,500.00-143,000.00 / year Company: Acronym Solutions Acronym is a full-service information and communications technology company that provides a range of scalable and secure solutions.

With more than 20 years experience managing the communications system that enables Ontarios electrical grid, Acronym is uniquely positioned to understand the mission-critical needs of any business.

We deliver innovative and reliable services that respond to the changing demands of businesses and support rapid growth and digital transformation.

Its an exciting time to join the team at Acronym Solutions! Job Function The Manager, Cyber Security Governance is a key resource that will be responsible for contributing and executing a strategy roadmap that matures Acronym cyber security capabilities.

The successful candidate will have knowledge of principles in cyber security policies and standards, and modern practices with a good understanding of governance models that support the review and reporting of organizational risks.

Asa member a dedicated Cyber Security team, the Sr Manager, Cyber Security

Governance works closely with senior leadership, team members and staffacross Risk, Audit, Legal, HR, Fraud, Operations, and Infrastructureteams to ensure the organization is operating securely.

Accountabilities 1.

Proactively lead the implementation of governance initiatives,providing technical and business advice, as well as insight ongovernance processes. 2.

Preparing and maintaining risk register that identifies risk areas and themes to report on the activities for risks issuesand remediationprogress. 3.

Enhancing and maintaining the security risk assessment framework. 4.

Aligning and refining Cyber Security policies and standards withindustry best practices, pertinent to regulations and standards bodies(NERC CIP, ISO 27001/2, PCI DSS, CIS, NIST Series) 5.

Prepare, track, maintain and report risk acceptances and securityexceptions. 6.

Leverage expertise in Cyber Security Management to prepare andconduct security assessments for both planned initiatives and unplannedinstances as required. 7.

Weigh business needs against security concerns to help guide thebusiness to make practical and informed risk decisions. 8.

Review technical documents in line with company policies. 9.

Report and measure through Metrics, the effectiveness of thetechnical controls (KPI/KRI) and propose compensating controlsaccordingly. 10.

Proactively contribute to security governance initiatives,providing technical and business advice, as well as insight onmanagement processes. 11.

Implement and enforce the Cyber Security policies and standardswith industry best practices, pertinent regulations and standards bodies(NERC CIP, ISO 27001/2, PCI DSS, CIS, NIST Series) 12.





Support the development and documentation of security processes tosupport risk management activities across the lifecycle in the SDLC,vendor management office, project management office, risk acceptance. 13.

Developing security requirements matrix mapped to organizationspolicies and standards. 14.

Examine and interpret requirement documents and architecturediagrams and determine security risks to the organization as required. 15.

Collaborate with senior leaders and make informed, risk-basedrecommendations to enhance the security posture of the organization,products and services. 16.

Weigh business needs against security concerns to help guide thebusiness to make practical and informed risk decisions. 17.

Participate and support security related initiatives and serve asa key interface with external and internal auditors for securitycompliance related activities. 18.

Keep abreast of the cybersecurity threats and assess theirpotential impact to Hydro One''s security posture. 19.

Lead and manage a team of [number of people] to achieve businessobjectives and goals. 20.

Provide guidance, support, and mentorship to team members to helpthem develop their skills and reach their full potential. 21.

Set performance expectations and goals for team members, andregularly provide feedback on their progress towards meeting thoseexpectations. 22.

Manage the recruitment, onboarding, and training of new teammembers. 23.

Foster a positive and collaborative team environment thatencourages open communication and teamwork. 24.

Identify and address any issues or conflicts within the team, andwork to resolve them in a timely and effective manner. 25.

Collaborate with other teams and departments to ensure alignmentand effective execution of company initiatives. 26.

Develop and implement strategies to improve team performance,productivity, and engagement. 27.

Ensure compliance with company policies, procedures, andregulations. 28.

Conduct regular performance reviews and assessments, and makerecommendations for promotions, transfers, or disciplinary actions asneeded.

Qualifications & Experience 1.

Bachelor''s degree in computer science, information security, or arelated field. 2.

Minimum 7 years in Cyber Security leadership/seniormanagement/senior roles, preferably within the electric/energy utilitysector or other large/multi-national organization. 3.

Security certification of one or more of the following: CISSP,CISA, CISM or other security certification 4.

Strong knowledge of industry standards and best practices forcyber risk management, including NIST, ISO, and COBIT. 5.

Demonstrated ability to build and implement new processes forgovernance frameworks and processes. 6.





Experience in consulting stakeholders with complex businesstransformation, technical advisory, and cyber risk strategy underpinnedby a deeper subject matter expertise in one or more cybersecuritydomains. 7.

Consistent record of developing and improving the security postureof enterprise and ICS/OT organization. 8.

Strong leadership and analytical skills with a record of peopledevelopment and technical delivery. 9.

Maintain in-depth awareness and understanding of current andemerging cyber security threat, risk and trends. 10.

Background in NERC CIP, CSAE3416 SOC 2, PCI DSS, and ITIL is anasset. 11.

Excellent communication skills, both verbal and written. 12.

Ability to collaborate effectively with cross-functional teams.

At Acronym we understand that the success and strength of our business rests with our people.

When we develop their skills, we are investing in both their success and ours.

To secure the best talent, we seek to create a workforce that reflects the diverse populations of the communities where we live and work and to create a culture based on safety, innovation and inclusiveness.

We are honoured to be recognized by Forbes in its list of Canadas Best Employers for 2026.

Thank you for considering a career with Acronym, we welcome applications from all qualified candidates.

If you are having difficulty using our online application system and you need an accommodation due to a disability, please email .

Acronym will provide reasonable accommodation for qualified individuals with disabilities in the job application process.

Please note this email is only for accommodation requests.

Resumes sent to this email address will not be considered. ''Employer of the year 2026'' Deadline: August 3, 2026 The base salary for this role considers a variety of factors, including candidates'' knowledge, skills, experience, education, and any applicable collective agreement requirements for union-represented positions.

Acronym Solutions provides an extensive offering of programs to promote a culture of safety, wellbeing, inclusivity, and sustainability to enable our employees to be the best version of themselves.

For management roles, compensation is based on the principle of pay-for performance compensation philosophy, and the amount of annual adjustments and incentive payments depends on how well you and the company perform (subject to plan terms).

We encourage open dialogue about compensation with our Talent Acquisition Team, who can provide more detailed information specific to this role.

This posting is for an existing vacancy.

Acronym Solutions uses AI tools to assist in the screening and assessing candidates for this role.

Our use of AI does not replace human decision-making.

In the event you are experiencing difficulties applying to this job please consult our help page here .

We thank all applicants for their interest in a career at Acronym Solutions; however, only those candidates who are selected for an interview will be contacted.

📌 Senior Manager, Cyber Security Governance (Toronto)
🏢 Hydro One Networks
📍 Toronto