About MalleumMalleum is at the forefront of next-generation cyber defense, partnering with marquee clients across space, aerospace, defense, government, financial services, and critical infrastructure. We're experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our advisors shape the governance, risk, and compliance programs that underpin cutting-edge defensive technologies, sovereign space capabilities, and allied programs with national security impact – from satellite and launch operations to next-generation defense platforms.If you take pride in shaping how the most consequential organizations govern cyber risk and want your counsel to influence sovereign and allied missions, Malleum is where your leadership meets purpose.The OpportunityWe're seeking a very senior governance, risk and compliance specialist to lead our most strategic GRC engagements and to help scale our advisory practice across the space, aerospace, and defense sectors.In this role you'll serve as a trusted counsel to CISOs, CIOs, CROs, and boards – translating regulatory complexity into pragmatic, mission-aligned programs. This is a remote position, with travel to client sites – typically Ontario-based – as required.This is a senior leadership role for a recognized GRC practitioner who has stood up enterprise-grade cyber resilience programs, navigated the most demanding compliance regimes,



and can mentor the next generation of Malleum advisors.What You'll DoLead executive-level GRC advisory engagements for clients across space, aerospace, defense, government, and critical infrastructureStand up and mature Cyber Resilience Programs at large enterprises, integrating governance, risk management, business continuity, third-party risk, and incident readiness into a cohesive operating modelAdvise C-suite and board stakeholders on cyber risk posture, regulatory exposure, and strategic investment prioritiesLead client journeys to CMMC (Cybersecurity Maturity Model Certification) readiness and certification, including scoping, gap assessments, SSP/POAM development, and assessor coordinationLead client adoption of the Canadian Program for Cyber Security Certification (CPCSC) for organizations supporting the Government of Canada defense supply chainDevelop, operationalize, and audit programs aligned with NIST CSF 2.0, NIST 800-53/171, ISO 27001/27005, ITSG-33, SOC 2, and sector-specific frameworksAdvise space-sector clients on emerging requirements such as Space ISAC guidance, NIST IR 8401 (Satellite Ground Segment), and allied space defense expectationsDefine and implement enterprise risk management frameworks, KRIs/KPIs, risk appetite statements, and board reporting cadencesLead third-party / supply-chain risk programs aligned with defense industrial base (DIB) and allied requirementsShape Malleum's GRC service offerings, methodologies, accelerators, and intellectual propertyMentor and develop senior managers, managers, and consultants — building bench strength and a robust delivery cultureDrive business development: trusted-advisor relationships,

📌 Executive Advisor - Governance, Risk & Compliance (Ottawa)
🏢 Malleum
📍 Ottawa