Who We Are

At Air Canada Vacations, we’re in the business of making dreams travel. That’s why we offer vacation packages, tours, cruises and more tailored to everyone’s individual needs. We like to say we have a vacation for every traveller because we do!

Who We Are

At Air Canada Vacations, we’re in the business of making dreams travel. That’s why we offer vacation packages, tours, cruises and more tailored to everyone’s individual needs. We like to say we have a vacation for every traveller because we do!

If you're someone who's passionate about exploring the world and sharing that enthusiasm with our customers, we'd love to welcome you to our team.

For over 50 years, Air Canada Vacations has been making travel easy, so come and join us in helping fellow Canadians create unforgettable memories wherever they go.

Don’t miss this opportunity! Submit your application by October 12, 2026 to be considered for this exciting opportunity.

Job Title: Partner, Cybersecurity Governance, Risk and Compliance

Department: IT - Operations

Location: YUL

Reporting Manager: Director, IT Operations, Infrastructure and Security

This is a

24-month temporary, onsite positionn .

Reporting to the Director, IT Operations, Infrastructure and Security. The Partner, Cybersecurity Governance, Risk & Compliance will be responsible for establishing and enforcing cybersecurity governance across strategic transformation initiatives (Juniper, CRM, CDP), while designing and implementing a structured cybersecurity framework for Air Canada Vacations aligned with industry standards (NIST or ISO 27002).

This role will modernize cybersecurity policies, define and classify critical information assets, and ensure that cybersecurity is integrated into all projects and business processes from inception.

What You'll Be Doing

Cybersecurity Governance for Strategic Programs

Establish security governance structures for Juniper (Reservation System), CRM, CDP

Implement

Security checkpoints and stage gates

Risk and compliance reviews within project lifecycle

Ensure alignment with

Privacy requirements (PIA, data retention, etc.)

Architecture and Change Management processes

Enforce “secure by design” governance across all initiatives

Cybersecurity Framework Development





Design and implement an enterprise cybersecurity framework for ACV based on NIST Cybersecurity Framework or ISO 27001 / 27002 controls

Define

Control domains and control catalog

Security standards and procedures

Governance and accountability model

Policy & Directive Modernization

Review, rationalize, and modernize Cybersecurity policies, directives and procedures

Align policies

With Air Canada corporate standards where applicable

Reflect modern architectures (cloud, SaaS, APIs)

Establish explicit policy lifecycle and governance model

Enterprise Asset Management & Data Classification

Define and implement

Enterprise asset inventory (applications, systems, data)

Data classification model (e.g., confidential, regulated, internal)

Identify

Critical systems and business assets

Sensitive and regulated data sets

Ensure classification drives Access controls, Retention policies, and Security controls

Risk Management & Compliance

Establish cybersecurity risk management framework:

Risk identification and assessment

Risk tracking and remediation

Formalize exception and risk acceptance processes

AI Governance & Responsible Use

Define and implement AI governance framework including:

AI usage policies and directives

Risk and compliance controls for AI systems

Data usage and model governance standards

Establish

Approval process for AI use cases

Monitoring and audit mechanisms for AI solutions

Ensure alignment with Air Canada enterprise policies (where applicable)

What You Bring To The Team

8-12+ years in Cybersecurity governance / GRC and Risk management / Compliance

Certifications required (CISSP and / or CISM)

CRISC, an asset

ISO 27001 Lead Implementer or Lead Auditor, an asset

NIST Cybersecurity Framework Training Certification, an asset

CDMP, an asset

Proven experience

Implementing NIST or ISO frameworks

Supporting large transformation programs





Establishing governance models

Exposure to AI/data governance initiatives

Good understanding of

Data governance and classification

AI governance concepts (risk, ethics, controls)

Cloud and SaaS environments

Extremely organized and diligent in maintaining consistency

Autonomous and dedicated

Excellent communicator

Results oriented and the ability to manage multiple priorities with a sense of urgency and orientation to deadlines

WHY WORK WITH US?

Our team loves to travel, and we have one of the most generous employee travel programs in the industry. You’ll be eligible for travel privileges for yourself and other eligible persons once you’ve completed 6 months of service

Hybrid work model: Corporate Mandate of 4 days in office (Tuesday, Wednesday, Thursday + 4th day of your choice) and 1 day from home

We value your wellbeing and offer a wide variety of benefit plans, including health and dental, for you and your family

We offer training and development tools to help unlock your full potential

Please note that these benefits apply to permanent, full-time employees.

Visit our Careers page for a full list of benefits.

OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION

Air Canada Vacations is committed to ensuring a Diverse, Equitable, and Inclusive Workplace, fundamental to its core values. We celebrate the uniqueness of every individual, listen to every voice, and instill a sense of belonging in our people that allows each team member’s authentic self to truly shine.

We encourage individuals of all backgrounds to apply as we strive to create a diverse team that mirrors the diversity of the customers and communities we serve as an equal opportunity employer. Should you require any accommodation, please inform us and we will work with you to meet your accessibility needs. For any accessibility-related assistance, requests for information in accessible alternative formats or to report any accessibility problems, please share in your application.

Linguistic Requirements

When qualifications are equal, preference will be given to bilingual candidates. The position involves daily interactions with partners, clients, and colleagues located outside of Quebec.

📌 Partner, Cybersecurity Governance, Risk and Compliance (24 Month Contract) (Winnipeg)
🏢 Air Canada Vacations
📍 Winnipeg