Shape cybersecurity governance and GRC for Air Canada Vacations in YUL through an onsite, 24-month temporary contract. Apply NIST or ISO 27002 expertise.

Reporting to the Director, IT Operations, Infrastructure and Security, this Partner role supports Juniper, CRM, and CDP transformation initiatives. You will establish governance structures, modernize policies, develop an enterprise cybersecurity framework, and strengthen risk, compliance, data, and AI governance. The work applies secure-by-design practices across strategic programs and aligns relevant Air Canada standards.

Key Responsibilities

Establish security checkpoints and stage gates for strategic programs

Design ACV’s NIST or ISO 27001/27002 cybersecurity framework

Modernize policies for cloud, SaaS, and API architectures





Implement asset inventory and data classification models

Define AI governance, approvals, monitoring, and audit mechanisms

Requirements

Eight to twelve-plus years in cybersecurity governance, GRC, risk, or compliance

CISSP and/or CISM certification required

Experience implementing NIST or ISO frameworks

Experience supporting large transformation programs and governance models

Understanding of data governance, AI governance, cloud, and SaaS

Bring structured cybersecurity governance, risk management, and framework expertise to Air Canada Vacations’ transformation initiatives.

📌 Cybersecurity Governance GRC Partner (Winnipeg)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Winnipeg