Shape cybersecurity governance and GRC for Air Canada Vacations in YUL through an onsite, 24-month temporary contract. Apply NIST or ISO 27002 expertise.
Reporting to the Director, IT Operations, Infrastructure and Security, this Partner role supports Juniper, CRM, and CDP transformation initiatives. You will establish governance structures, modernize policies, develop an enterprise cybersecurity framework, and strengthen risk, compliance, data, and AI governance. The work applies secure-by-design practices across strategic programs and aligns relevant Air Canada standards.
Key Responsibilities: Establish security checkpoints and stage gates for strategic programs
Design ACV’s NIST or ISO 27001/27002 cybersecurity framework
Modernize policies for cloud, SaaS, and API architectures




Implement asset inventory and data classification models
Define AI governance, approvals, monitoring, and audit mechanisms
Requirements: Eight to twelve-plus years in cybersecurity governance, GRC, risk, or compliance
CISSP and/or CISM certification required
Experience implementing NIST or ISO frameworks
Experience supporting large transformation programs and governance models
Understanding of data governance, AI governance, cloud, and SaaS
Bring structured cybersecurity governance, risk management, and framework expertise to Air Canada Vacations’ transformation initiatives.

#J-18808-Ljbffr

📌 Cybersecurity Governance GRC Partner (Quebec City)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Quebec City