We are seeking an experienced

Senior Manager, Cybersecurity – Governance, Risk & Compliance (GRC)

to provide strategic leadership across the organization's cybersecurity program. This role will lead the development and advancement of the organization's

cybersecurity strategy, governance, risk management, compliance, and security initiatives , ensuring organizational assets are protected, regulatory and industry requirements are met, and the overall security posture continues to mature. The Senior Manager will serve as a trusted cybersecurity advisor to

IT leadership, Executive Management, and senior business stakeholders , translating complex cybersecurity and technology risks into clear business priorities, strategic recommendations, and actionable plans. The role will provide broad oversight across

GRC, security operations, incident response, cyber resilience, cloud security, third-party risk, and the secure adoption of AI and emerging technologies . Key Responsibilities

Cybersecurity Strategy & Leadership

Develop and execute a multi-year

cybersecurity strategy, roadmap, and operating model

aligned with business objectives and enterprise risk. Establish cybersecurity priorities, investment plans, budgets, and business cases. Define cybersecurity KPIs and KRIs to measure risk, control effectiveness, program maturity, and overall performance. Continuously monitor emerging threats, technologies, vulnerabilities, and changes in the cybersecurity landscape. Identify opportunities to strengthen the organization's overall security maturity and resilience. Lead the organization's

Cybersecurity GRC program , including: Enterprise cybersecurity risk assessments Policies and standards Control frameworks Compliance monitoring Executive reporting Establish and maintain effective cybersecurity governance structures, policies, standards, and procedures. Lead cybersecurity audits, regulatory reviews, customer security assessments, and compliance initiatives. Provide oversight of cybersecurity controls and ensure identified gaps are appropriately remediated. Maintain alignment with recognized frameworks and standards including

NIST, ISO 27001, CIS Controls, and SOC 2 . Lead cybersecurity strategy and governance for the secure adoption of

Artificial Intelligence, Generative AI, machine learning, automation, and other emerging technologies . Assess cybersecurity, privacy, data, and third-party risks associated with AI-enabled technologies and emerging platforms. Establish governance requirements for responsible AI and Generative AI use, including: Data protection Access controls Monitoring Partner with Technology, Data, Privacy, Legal,



and business teams to establish

secure-by-design principles

for AI and emerging technologies. Identify opportunities to use AI and automation to enhance threat detection, security monitoring, incident response, vulnerability management, and security operations. Monitor emerging cyber threats involving AI and develop appropriate controls, detection capabilities, and response strategies. Executive Advisory & Reporting

Serve as a trusted cybersecurity advisor to the

CIO, IT leadership, Executive Management, and senior business stakeholders . Translate technical cybersecurity risks into clear business impacts, priorities, and recommendations. Prepare and present cybersecurity risk, compliance, maturity, and strategic updates to Executive Management and the Board. Provide leadership with actionable recommendations regarding cybersecurity investments and risk priorities. Security Operations & Cyber Resilience

Provide executive oversight of cybersecurity incident response, cyber resilience, tabletop exercises, and major incident reviews. Oversee the performance of outsourced

Security Operations Center (SOC)/MSSP

providers. Provide governance and oversight across: Security monitoring Vulnerability management Ensure appropriate processes are in place to prepare for, respond to, and recover from significant cyber incidents. Third-Party & Supply Chain Risk

Lead third-party and supply-chain cybersecurity risk management. Establish security requirements and assessment processes for vendors and strategic partners. Review and assess cybersecurity risks associated with critical third parties and service providers. Partner with Procurement, Legal, Risk, and business stakeholders to embed cybersecurity requirements into vendor management and contracting processes. Enterprise Security Governance

Provide cybersecurity governance and risk oversight across: Cloud environments Infrastructure Applications Data Identity and access management AI and emerging technologies Enterprise technology architecture Partner with Technology, Business, Legal, Privacy, Risk, Internal Audit, Procurement, and external providers to embed cybersecurity into business and technology decisions. Lead, mentor, and develop cybersecurity professionals. Build a high-performing,



team-oriented, and sustainable cybersecurity organization. Establish clear objectives, accountability, and professional development opportunities for team members. Qualifications & Experience

Bachelor's degree in

Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline . 12+ years of progressive cybersecurity/information security experience , including at least

5 years in a leadership or management capacity . Strong experience in:Cybersecurity strategy Security assurance Security program management Demonstrated experience overseeing

SOC/MSSP relationships and cybersecurity operations . Strong understanding of cybersecurity risks associated with

AI, cloud, automation, and emerging technologies . Experience balancing innovation with security, privacy, regulatory, and enterprise risk requirements. Demonstrated experience in

incident response, cyber resilience, and security program management . Experience presenting cybersecurity strategy and risk to senior executives and/or Boards. Experience supporting audits, regulatory reviews, customer security assessments, and cybersecurity compliance programs. Experience with

cloud security and cybersecurity architecture . Experience developing cybersecurity budgets, business cases, KPIs/KRIs, and investment priorities. Strong knowledge of recognized cybersecurity frameworks, including

NIST, ISO 27001, CIS Controls, and SOC 2 . Experience in the transportation, logistics or airline industry would be an asset. Preferred Certifications

One or more of the following certifications would be considered an asset: CISSP CISM CRISC CCSP GIAC Other recognized cybersecurity, information security, risk, or audit certifications What Success Looks Like

Success in this role will be demonstrated through: Increased cybersecurity maturity and improved enterprise risk posture Strong cybersecurity governance and executive visibility Effective identification, prioritization, and reduction of material cyber risks Strong audit, compliance, and regulatory outcomes Effective third-party and supply-chain cybersecurity risk management Improved cyber incident preparedness, response, and resilience Successful execution of the cybersecurity strategy and roadmap Responsible and secure adoption of AI and emerging technologies A strong, capable, and sustainable cybersecurity team Candidates must be eligible to work in Canada I would like to thank all the candidates in advance. Please do stay connected on LinkedIn for future opportunities. Shortlisted candidates will be contacted .

#J-18808-Ljbffr

📌 Senior Manager Cybersecurity - Governance Risk and Compliance (Winnipeg)
🏢 Professional Staffing
📍 Winnipeg