What you’ll do
- Act as a senior trusted advisor to executive, management and technical stakeholders, leading cyber risk advisory engagements that define client vision, priorities and desired business outcomes.
- Deliver and oversee Cyber Risk GRC services, including governance, risk and compliance assessments, program implementations, control gap assessments and internal audits, as well as privacy program assessments and AI governance advisory services.
- Lead complex, non-standard client engagements that require senior advisory judgment, cross-practice coordination or customized approaches beyond standard Cyber Risk services.
- Conduct executive-level workshops and strategy sessions that help clients understand cyber risk, evaluate options, prioritize initiatives and make informed decisions.
- Advise clients on emerging cyber risk, security, privacy and technology trends, including cloud, automation, AI, third-party risk, regulatory change and evolving threat activity.
- Guide clients through the implementation and remediation of information security and privacy controls, including controls related to responsible AI use, data protection, consent, accountability and privacy-by-design practices, ensuring recommendations are practical, risk-based and aligned to client operating environments.
- Develop and quality review client deliverables such as policies, standards, procedures, risk reports, assessment results, executive summaries, remediation plans, privacy impact assessment outputs and AI governance guidance.
- Provide advisory oversight for multi-practice solutions to help ensure cyber risk, privacy and AI governance considerations remain aligned with client objectives.
- Lead and support the development of the Cyber Risk practice by creating reusable intellectual property, frameworks, templates, methodologies,



service offerings and ready-to-use project tools.
- Contribute to thought leadership and market presence through articles, white papers, presentations, webinars, podcasts, client briefings and other external-facing initiatives.
- Build strong relationships with CDW sales, solution architecture and consulting teams to support coordinated delivery, identify client needs and enable strategic account growth.
- Mentor consultants and support knowledge sharing across the Cyber Risk team through coaching, delivery guidance, quality review and practice enablement activities.
- Maintain current knowledge of cyber threats, security technologies, industry trends, risk frameworks, regulatory expectations and leading practices relevant to client engagements.
- Prepare and deliver clear executive-ready communications, presentations and recommendations for business, technical and leadership audiences, including topics related to security GRC, privacy risk and AI governance.
- Supporting and occasionally leading the pre-sales process, solutioning engagements and complex assessments for prospective clients. What you need to succeed Must-have
- 10+ years of experience in cyber risk, information security, privacy, technology risk, GRC consulting or a related advisory role.
- Experience advising executive, management and technical stakeholders on cyber risk strategy, security program maturity,



risk prioritization and roadmap development.
- Strong knowledge of security, privacy and risk frameworks such as ISO 27001, ISO 27017, ISO 27018, ISO 42001, NIST CSF, CIS Controls, PCI DSS, SOC, COBIT, ITIL or similar standards.
- Demonstrated experience leading complex client engagements, including assessments, audits, remediation planning, program reviews, control implementation support and executive reporting.
- Ability to translate business objectives, regulatory requirements and technical risks into clear recommendations, practical roadmaps and client-ready deliverables.
- Strong executive communication and presentation skills, with the ability to explain complex cyber risk concepts to business, technical and leadership audiences.
- Experience developing client deliverables such as policies, standards, procedures, assessment reports, risk registers, roadmaps, executive summaries and strategy documents.
- Ability to build strong relationships with clients, sales teams, solution architects and consulting practices to support coordinated delivery and account growth.
- Experience mentoring consultants, supporting quality review activities and contributing to internal practice development or process improvement initiatives.
- Hold three or more relevant professional designations such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, AIGP, CCSP, CIPP/C or CCISO.
- Strong proficiency with Microsoft Office products, including Outlook, Word, PowerPoint, Excel and Visio.
- Hold a relevant college or university degree, or equivalent skilled experience. Nice-to-have
- Experience working in or advising regulated industries such as financial services, healthcare, government, education or profess

📌 Field CISO, Cyber Risk (Vaughan)
🏢 CO3000 CDW Canada
📍 Vaughan