The Senior Leader Cybersecurity is the accountable cybersecurity and GRC leader .
This handson role sets direction and drives execution across information security governance risk compliance privacy resilience and security incident response for a platform product and SaaS business serving financial institutions .
The leader will translate regulatory contractual and emerging threat requirements into a prioritized roadmap measurable actions and sustainable operating practices
The role leads the GRC team of three aligns with the Corporate CISO organization and works directly with all levels of clients auditors product managers architects engineering testing delivery and support teams.
The successful candidate must be comfortable moving between strategic leadership client engagement operational decisionmaking and detailed follow through
Primary Outcomes
An integrated riskbased cybersecurity and GRC roadmap aligned to FSTI business priorities and the Corporate CISO strategy.
Clear ownership prioritization and closure of security risk audit privacy resilience and compliance actions.
Decisive leadership of security incidents including coordination stakeholder communication remediation lessons learned and closure.
A mature GRC team structure and operating model that scales as FSTI products clients regulations technologies and delivery patterns evolve.
Client confidence through transparent monthly GRC and security cadences evidencebased reporting and timely responses to security and compliance requests.
Practical controls for AI enabled products AI use thirdparty AI services and emerging cyber threats.
Key Responsibilities
Leadership Strategy Operating Model.
Lead coach and mature the FSTI GRC team of three establishing clear roles objectives decision rights governance forums and performance measures.
Own and maintain a multiyear cybersecurity and GRC roadmap translating business regulatory client audit and threat priorities into funded and sequenced initiatives.
Align FSTI security practices standards exceptions and reporting with the Corporate LTM CISO organization while addressing FSTIspecific product SaaS and client requirements.
Operate effectively across a global delivery model partnering with primarily onshore leaders and product managers and predominantly offshore engineering testing support and delivery teams including teams in offshore.
Provide handson guidance remove roadblocks escalate material risks and drive actions to measurable completion.
Governance Risk Compliance Assurance.
Own the FSTI GRC framework risk register control library policy and standards lifecycle exception process issue management and executive reporting.
Lead internal and external audits and assessments including SOC 1 SOC 2 ISO 27001 NISTaligned reviews client audits and other applicable assurance activities.
Interpret regulatory contractual and privacy obligations applicable to financial institutions and technology service providers and map them to FSTI controls evidence and accountable owners.
Drive vulnerability penetration testing access governance thirdparty risk security awareness business continuity disaster recovery and remediation governance to closure.
Partner with legal privacy procurement architecture product engineering and operations teams to embed Security and Privacy by Design across the product lifecycle.
Security Incident Emerging Threat Leadership.
Serve as the FSTI lead for confirmed or suspected security incidents coordinating triage containment investigation recovery communications required notifications corrective actions and lessons learned with Corporate CISO and business stakeholders.
Establish clear incident roles escalation criteria decision paths communications protocols and exercise schedules for cyber privacy thirdparty cloud and product related scenarios.
Monitor threat intelligence and emerging risks assess applicability to FSTI prioritize response actions assign owners track progress and report residual risk.
Anticipate threats affecting financialservices technology and SaaS environments including identity compromise software supplychain risk ransomware cloud misconfiguration API abuse data leakage third party concentration risk and AI enabled attacks.
AI Security Responsible AI Risk.
Develop and operationalize governance for approved AI use AIenabled product capabilities generative AI machine learning and thirdparty AI services in alignment with enterprise requirements.
Assess AIspecific threats and control needs including sensitivedata exposure prompt injection insecure model or plugin integration model and data supplychain risk excessive agency unreliable output abuse privacy intellectualproperty and regulatory risk
Skills:
Mandatory Skills : GRC Risk Assessment
About Company:
LTM is an AI-centric global technology services company and the Business Creativity partner to the world’s largest and most disruptive enterprises. We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise. Our capabilities span integrated operations, transformation, and business AI — enabling new ways of working, recent productivity paradigms, and new roads to value. Together with over 87,000 employees across 40 countries and our global network of partners, LTM — a Larsen & Toubro company — owns business outcomes for our clients, helping them not just outperform the market, but to Outcreate it. Please also note that neither LTM nor any of its authorized recruitment agencies/partners charge any candidate registration fee or any other fees from talent (candidates) towards appearing for an interview or securing employment/internship. Candidates shall be solely responsible for verifying the credentials of any agency/consultant that claims to be working with LTM for recruitment. Please note that anyone who relies on the representations made by fraudulent employment agencies does so at their own risk, and LTM disclaims any liability in case of loss or damage suffered as a consequence of the same. Recruitment Fraud Alert - https://www.ltm.com/careers/recruitment-fraud-alert
📌 Senior GRC Consultant with AI skills(Onsite) (Mississauga)
🏢 LTM
📍 Mississauga
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.