Senior Governance, Risk & Compliance Consultant

Posting Start Date: 30/10/2026

Posting End Date: 14/11/2026

Status: Regular

Number of Openings: 1

Education Level: 4 years of University in Computer Science.

Base Location: 1908 Colonel Sam Drive, Oshawa, Ontario L1H 8W8

Shift: Days

Travel Required: 10%

Salary Range: $2,751.92 - $3,227.88

Electrify your career and help build a brighter tomorrow.

Every generation has a challenge that defines them. At OPG, we are calling on all innovators, disruptors, thought leaders and change-makers. Join us as we work to electrify life in one generation and build a sustainable future powered by our electricity, our ideas, and our people. Join OPG and make history.

Whether you work in the skilled trades or are a business professional, a career at OPG is an opportunity to electrify your life on -- and off -- the job.

Ontario Power Generation (OPG) is looking for a dynamic, strategic and results-driven professional to join our team in the role of Senior Governance, Risk & Compliance Consultant.

Job Overview

Reporting to the Section Head, Information Systems, this position is responsible is responsible to lead and conduct cybersecurity assessments, policy gap analysis, and risk evaluations based on established frameworks such as NIST, ISO, and CIS, while advising business units and subsidiaries on governance, risk, and compliance best practices.

Key Accountabilities

- Responsible for creating, maintaining, and enforcing cybersecurity standards, policies, and procedures across the organization.
- Develops cyber governance frameworks that align with regulatory requirements, industry standards, and organizational risk objectives.
- Assesses compliance with established cyber standards and identifies gaps,



risks, or areas requiring improvement.
- Assists in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for the Cyber Governance Security Program and initiatives. Provide advisory service to business units on governance, risk, and compliance bestpractices.
- Has experience working with GRC tools like ServiceNow IRM, Archer, etc. and helps develop and maintain risk registers and maintain GRC tools to provide oversight for the cybersecurity program
- Conduct various risk, gap, control, maturity, and compliance assessments based on established security frameworks including but not limited to NIST CSF, CIS, ISO 27001, ISF, CSA N290.7, NERC-CIP, etc.
- Perform Third party Cyber risk assessments by working with vendors and ensureadherence to Cybersecurity Terms and Conditions using a Risk based approach.
- Support ICFR activities, including control design assessment, operating effectiveness testing, evidence review, and remediation tracking to ensure compliance and risk mitigation.

Qualifications

- Requires a 4 Year University Degree in Computer Science.
- Minimum 6 years of relevant working experience in Cyber Risk, Consulting, and Third-Party Cyber Risk Management etc.
- Demonstrated experience developing, maintaining, and enforcing cybersecurity policies, standards, procedures,



and governance frameworks aligned with organizational risk objectives.
- Strong working knowledge of established cybersecurity frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, ISF, CSA N290.7, NERC-CIP, and related regulatory or compliance requirements.
- Proven ability to perform risk, gaps, control, maturity, third-party, and compliance assessments; identify findings; and recommend practical remediation actions to improve security posture.
- Experience using GRC or Integrated Risk Management tools such as ServiceNow IRM, Archer, or equivalent platforms to maintain risk registers, track issues, support reporting, and provide program oversight.
- Robust ability to partner with business, technology, cybersecurity, audit, regulatory, vendor, and executive stakeholders to support governance activities, policy adoption, risk remediation, and committee reporting.
- Experience developing KPIs, KRIs, executive or Board-level reports, control failure reporting, and program health reporting to support continuous improvement of cybersecurity governance, risk, and compliance programs.

The successful candidate willexhibituncompromising integrity and commitment to upholding corporate values, and the OPG Code of Business Conduct.

OPG is committed to fostering an inclusive, equitable, and accessible environment. If you require accommodation during the selection process, please contact [email protected].

What makes a career at OPG different?

With operations across Ontario, OPG is one of the most diverse power producers in North America. As the largest generator in Ontario, we meet approximately 50% of the province's electricity needs,la

📌 Senior Governance, Risk (Oshawa)
🏢 Ontario Power Generation
📍 Oshawa