Principal Cybersecurity & GRC AdvisorAbout Highspring Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to clients across North America. We work with leading organizations to help them address complex technology challenges, strengthen their capabilities, and deliver meaningful business impact. At Highspring, we believe in empowering our people, fostering technical leadership, and creating opportunities for our consultants to contribute where their expertise matters most. The Opportunity Highspring is looking for a Principal Cybersecurity & GRC Advisor to support a large-scale organization operating in a complex, highly regulated technology workplace. In this role, you will serve as a trusted cybersecurity expert and strategic advisor to technology, business, and leadership teams. You will help align business objectives, security requirements, regulatory obligations, and risk priorities to guide technology decisions and protect critical organizational assets. You will collaborate across a highly matrixed environment, advising managers, architects, technology teams, and project leaders to ensure decisions are secure, practical, and aligned with business priorities. Act as a lead cybersecurity expert across strategic technology domains. Bridge business requirements, cybersecurity needs, regulatory obligations, and organizational risk priorities. Evaluate and approve cybersecurity risk assessments, technology architectures, and risk mitigation strategies. Contribute to the evolution of cybersecurity standards, policies, and governance frameworks. Participate in architecture, governance, and risk management committees. Advise business and technology teams on information security and cybersecurity best practices. Support technology transformation,



modernization, and innovation initiatives. Monitor emerging cyber threats, evolving regulations, and relevant industry trends. Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field. ~15+ years of experience in information security or cybersecurity. ~ Strong understanding of cybersecurity risk management, security governance, and enterprise architecture. ~ Hands‑on experience conducting cybersecurity risk assessments and managing technology risk. ~ Ability to communicate effectively with both highly technical teams and business leaders. ~ Cybersecurity governance, risk, and compliance (GRC) Cybersecurity risk assessment and risk management Information security governance Enterprise architecture and technology risk Stakeholder management and executive‑level advisory Technology transformation and modernization Regulatory and security requirements CISSP, CISM, CISA, or equivalent cybersecurity certification. Familiarity with NIST, ISO 27001, CMMC, or comparable cybersecurity frameworks. Collaborate with business and technical stakeholders on strategic cybersecurity challenges. Access continuous learning, certification, and training opportunities. Be part of a collaborative culture that values technical expertise, sound judgment, and meaningful business impact. Conseiller(ère) principal(e),



Cybersécurité et GRC/ SeniorÀ propos de Highspring Highspring est une firme de services‑conseils et de services professionnels de nouvelle génération. Nous proposons des solutions modernes, agiles et tournées vers l’avenir à des clients partout en Amérique du Nord. Chez Highspring, nous croyons à l’autonomie de nos professionnels, au leadership technique et à la possibilité pour nos consultants de contribuer à des mandats où leur expertise fait réellement la différence. L’opportunité Highspring recherche un(e) Conseiller(ère) principal(e), Cybersécurité et GRC afin d’accompagner une organisation d’envergure évoluant dans un environnement technologique complexe et hautement réglementé. Dans ce rôle, vous agirez à titre d’expert(e) de confiance en cybersécurité et de conseiller(ère) stratégique auprès des équipes technologiques, des équipes d’affaires et des gestionnaires. Vous collaborerez au sein d’un environnement hautement matriciel avec des gestionnaires, des architectes, des équipes technologiques et des responsables de projets afin de favoriser des décisions sécuritaires, pragmatiques et alignées sur les besoins d’affaires. Agir à titre d’expert(e) principal(e) en cybersécurité pour des domaines technologiques stratégiques. Faire le pont entre les besoins d’affaires, les exigences de cybersécurité, les obligations réglementaires et les priorités organisationnelles en matière de risques. Évaluer et approuver les analyses de risques en cybersécurité, les architectures technologiques et les stratégies d’atténuation des risques. Contribuer à l’évolution des normes, politiques et cadres de gouvernance en cybersécurité. Participer aux comités d’architecture, de gouvernance et de gestion des

📌 Architecte Cybersécurité (Canada)
🏢 Vaco
📍 Canada