Shape cybersecurity governance and GRC for Air Canada Vacations in YUL through an onsite, 24-month temporary contract. Apply NIST or ISO 27002 expertise. Reporting to the Director, IT Operations, Infrastructure and Security, this Partner role supports Juniper, CRM, and CDP transformation initiatives. You will establish governance structures, modernize policies, develop an enterprise cybersecurity framework, and strengthen risk, compliance, data, and AI governance. The work applies secure-by-design practices across strategic programs and aligns relevant Air Canada standards. Key Responsibilities:

Establish security checkpoints and stage gates for strategic programs Design ACV’s NIST or ISO 27001/27002 cybersecurity framework Modernize policies for cloud, SaaS,



and API architectures Implement asset inventory and data classification models Define AI governance, approvals, monitoring, and audit mechanisms Requirements:

Eight to twelve-plus years in cybersecurity governance, GRC, risk, or compliance CISSP and/or CISM certification required Experience implementing NIST or ISO frameworks Experience supporting large transformation programs and governance models Understanding of data governance, AI governance, cloud, and SaaS Bring structured cybersecurity governance, risk management, and framework expertise to Air Canada Vacations’ transformation initiatives.

📌 Cybersecurity Governance GRC Partner (Winnipeg)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Winnipeg