Shape cybersecurity governance and risk management onsite in YUL for Air Canada Vacations’ 24-month temporary Partner assignment.

Reporting to the Director, IT Operations, Infrastructure and Security, this role governs Juniper, CRM, and CDP transformations. You will design an enterprise framework aligned with NIST or ISO 27001 / 27002 controls, modernize policies, and integrate security into projects and business processes.

Key Responsibilities:

- Establish governance structures across Juniper, CRM, and CDP
- Implement security checkpoints, stage gates, and lifecycle reviews
- Design ACV’s enterprise cybersecurity framework and control catalog
- Modernize policies for cloud, SaaS, and APIs
- Establish risk acceptance and remediation processes

Requirements:

- 8–12+ years in cybersecurity governance, GRC, risk, or compliance
- CISSP and/or CISM certification required
- Experience implementing NIST or ISO frameworks
- Experience supporting large transformation programs
- Excellent communication and organizational skills

Apply cybersecurity governance, NIST or ISO frameworks, and risk management expertise across Air Canada Vacations transformation initiatives.

📌 Cybersecurity Governance Risk Partner (Montreal)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Montreal