Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly. This permanent, full-time leadership role owns the client’s Enterprise Cyber Risk Framework and active risk registers. You will mature policies, optimize GRC workflows, validate controls, and coordinate audit readiness. The work spans cybersecurity, technology, data, vendors, and regulatory requirements. Key Responsibilities:

Operate the Enterprise Cyber Risk Framework and active risk registers Translate complex risks into executive reporting, heatmaps, and KRI dashboards Modernize policies, GRC workflows, and control validation processes Coordinate audit readiness across NIST, ISO 27001,



and financial regulations Streamline vendor risk assessments and customer due diligence Requirements:

10+ years in cybersecurity, information security, technology risk, or related disciplines 5+ years of direct Governance, Risk and Compliance experience 3+ years leading cybersecurity, technology risk, or compliance functions Regulated-industry experience in financial services, fintech, banking, or related sectors Robust executive communication, stakeholder management, and cyber risk governance knowledge Bring cyber risk leadership, GRC modernization, and regulatory expertise to enterprise governance in downtown Toronto.

📌 Director Cyber Governance Risk Compliance (Winnipeg)
🏢 RobertsonLtd.
📍 Winnipeg