Shape cybersecurity governance and risk management onsite in YUL for Air Canada Vacations’ 24-month temporary Partner assignment.

Reporting to the Director, IT Operations, Infrastructure and Security, this role governs Juniper, CRM, and CDP transformations. You will design an enterprise framework aligned with NIST or ISO 27001 / 27002 controls, modernize policies, and integrate security into projects and business processes.

Key Responsibilities: Establish governance structures across Juniper, CRM, and CDP

Implement security checkpoints, stage gates, and lifecycle reviews

Design ACV’s enterprise cybersecurity framework and control catalog

Modernize policies for cloud, SaaS, and APIs

Establish risk acceptance and remediation processes

Requirements: 8–12+ years in cybersecurity governance, GRC, risk, or compliance

CISSP and/or CISM certification required

Experience implementing NIST or ISO frameworks

Experience supporting large transformation programs

Excellent communication and organizational skills

Apply cybersecurity governance, NIST or ISO frameworks, and risk management expertise across Air Canada Vacations transformation initiatives.

📌 Cybersecurity Governance Risk Partner (Montreal)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Montreal