Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly.

This permanent, full time leadership role owns the client’s Enterprise Cyber Risk Framework and active risk registers. You will mature policies, optimize GRC workflows, validate controls, and coordinate audit readiness. The work spans cybersecurity, technology, data, vendors, and regulatory requirements.

Key Responsibilities

Operate the Enterprise Cyber Risk Framework and active risk registers

Translate complex risks into executive reporting, heatmaps, and KRI dashboards

Modernize policies, GRC workflows, and control validation processes

Coordinate audit readiness across NIST, ISO 27001, and financial regulations





Streamline vendor risk assessments and customer due diligence

Requirements

10+ years in cybersecurity, information security, technology risk, or related disciplines

5+ years of direct Governance, Risk and Compliance experience

3+ years leading cybersecurity, technology risk, or compliance functions

Regulated-industry experience in financial services, fintech, banking, or related sectors

Strong executive communication, stakeholder management, and cyber risk governance knowledge

Bring cyber risk leadership, GRC modernization, and regulatory expertise to enterprise governance in downtown Toronto.

📌 Director Cyber Governance Risk Compliance (Winnipeg)
🏢 Robertson u0026 Company
📍 Winnipeg