Shape cybersecurity governance and GRC for Air Canada Vacations in YUL through an onsite, 24-month temporary contract. Apply NIST or ISO 27002 expertise.Reporting to the Director, IT Operations, Infrastructure and Security, this Partner role supports Juniper, CRM, and CDP transformation initiatives. You will establish governance structures, modernize policies, develop an enterprise cybersecurity framework, and strengthen risk, compliance, data, and AI governance.

The work applies secure-by-design practices across strategic programs and aligns relevant Air Canada standards.Key Responsibilities:

Establish security checkpoints and stage gates for strategic programsDesign ACV’s NIST or ISO 27001/27002 cybersecurity frameworkModernize policies for cloud, SaaS,



and API architecturesImplement asset inventory and data classification modelsDefine AI governance, approvals, monitoring, and audit mechanismsRequirements:

Eight to twelve-plus years in cybersecurity governance, GRC, risk, or complianceCISSP and/or CISM certification requiredExperience implementing NIST or ISO frameworksExperience supporting large transformation programs and governance modelsUnderstanding of data governance, AI governance, cloud, and SaaSBring structured cybersecurity governance, risk management, and framework expertise to Air Canada Vacations’ transformation initiatives.

📌 Cybersecurity Governance Grc Partner (Winnipeg)
🏢 Vacances Air Canada / Air Canada Vacations
📍 Winnipeg