Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly.
This permanent, full time leadership role owns the client’s Enterprise Cyber Risk Framework and active risk registers. You will mature policies, optimize GRC workflows, validate controls, and coordinate audit readiness. The work spans cybersecurity, technology, data, vendors, and regulatory requirements.
Key Responsibilities: Operate the Enterprise Cyber Risk Framework and active risk registers
Translate complex risks into executive reporting, heatmaps, and KRI dashboards
Modernize policies, GRC workflows, and control validation processes
Coordinate audit readiness across NIST, ISO 27001, and financial regulations




Streamline vendor risk assessments and customer due diligence
Requirements: 10+ years in cybersecurity, information security, technology risk, or related disciplines
5+ years of direct Governance, Risk and Compliance experience
3+ years leading cybersecurity, technology risk, or compliance functions
Regulated-industry experience in financial services, fintech, banking, or related sectors
Strong executive communication, stakeholder management, and cyber risk governance knowledge
Bring cyber risk leadership, GRC modernization, and regulatory expertise to enterprise governance in downtown Toronto.

#J-18808-Ljbffr

📌 Director Cyber Governance Risk Compliance (Ontario)
🏢 RobertsonLtd.
📍 Ontario