Overview

Provide strategic leadership and direction for the organization's cybersecurity program, ensuring alignment with business objectives, enterprise risk, and evolving threat landscapes.

Lead cybersecurity strategy, governance, risk management, and compliance (GRC), with executive oversight of security operations, incident response, cyber resilience, cloud security, third-party risk, and the secure adoption of AI and emerging technologies.

Serve as a trusted cybersecurity advisor to executive leadership, translating complex technology and cyber risks into clear business priorities, investment decisions, and actionable risk mitigation strategies.

Key Responsibilities

- Develop and execute a multi-year cybersecurity strategy, roadmap, and operating model aligned with business objectives and enterprise risk appetite.
- Lead the enterprise cybersecurity GRC program, including risk assessments, policies, control frameworks, remediation, compliance, and executive reporting.
- Establish cybersecurity governance, standards, and controls across infrastructure, cloud, applications, identity, data, and emerging technologies.
- Define and oversee the cybersecurity strategy for AI, Generative AI, machine learning, and emerging technology adoption.
- Assess and mitigate AI-related cybersecurity, privacy, data protection, model security, and third-party risks.
- Establish governance and security requirements for the responsible and secure use of AI and emerging technologies.
- Evaluate opportunities to leverage AI and automation to improve threat detection, security monitoring, vulnerability management, and incident response.
- Monitor evolving cyber threats, attack techniques, and vulnerabilities, translating intelligence into appropriate security controls and mitigation strategies.
- Advise executive leadership on cybersecurity posture, material risks, risk exposure, and strategic priorities.
- Provide executive-level reporting on cybersecurity performance, risk, compliance, and program maturity.




- Oversee cybersecurity audits, regulatory assessments, customer security reviews, and compliance initiatives.
- Establish and monitor cybersecurity KPIs and KRIs to measure control effectiveness, risk exposure, and program maturity.
- Develop cybersecurity budgets, investment plans, business cases, and resource priorities.
- Provide oversight of incident response, business continuity, cyber resilience, disaster recovery, and incident simulation exercises.
- Oversee the effectiveness of internal and external security operations capabilities, including SOC, managed security services, threat intelligence, and vulnerability management.
- Lead third-party and supply-chain cybersecurity risk management, including vendor assessments, security requirements, and ongoing risk oversight.
- Collaborate with IT, business, Legal, Privacy, Risk, Procurement, and Internal Audit to embed security into enterprise decisions and technology initiatives.
- Build, lead, and develop a high-performing cybersecurity team, establishing clear accountability, capability, and continuous improvement.

Qualifications and Experience

- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
- 12+ years of progressive experience in cybersecurity or information security, including at least 5 years in senior leadership or management roles.
- Demonstrated expertise in cybersecurity strategy, governance, risk management, compliance, and security assurance.
- Proven experience managing security operations, SOC/MSSP providers, and incident response capabilities.




- Strong understanding of cybersecurity risks associated with AI, cloud, automation, and emerging technologies.
- Experience developing and implementing enterprise security policies, standards, controls, and risk mitigation strategies.
- Demonstrated experience in cyber incident management, business resilience, and security program transformation.
- Proven ability to communicate complex cybersecurity risks and recommendations to executive leadership and senior stakeholders.
- Experience managing cybersecurity audits, regulatory assessments, compliance programs, and third-party security reviews.
- Solid knowledge of cloud security, enterprise security architecture, identity management, and data protection.
- Experience developing cybersecurity budgets, business cases, investment strategies, and performance metrics.
- Working knowledge of recognized cybersecurity frameworks, including NIST, ISO 27001, CIS Controls, and SOC 2.
- Strong strategic thinking, stakeholder management, decision-making, and leadership capabilities.

Preferred Certifications CISSP, CISM, CRISC, CCSP, GIAC, or other recognized cybersecurity, information security, risk management, or audit certifications.

Key Success Measures

- Improved cybersecurity maturity and reduced enterprise risk exposure.
- Effective cybersecurity governance, accountability, and executive oversight.
- Measurable reduction of material cybersecurity risks.
- Strong audit, regulatory, and compliance performance.
- Effective third-party and supply-chain risk management.
- Improved incident readiness, response effectiveness, and cyber resilience.
- Successful execution of the cybersecurity strategy and roadmap.
- Effective oversight of security operations and external security providers.
- Responsible and secure adoption of AI and emerging technologies.
- Development of a capable, accountable, and sustainable cybersecurity function.

Pay: $100,600.00-$152,000.00 per year

Work Location: In person

📌 Manager, Cybersecurity & GRC (Mississauga)
🏢 INXSYS
📍 Mississauga