Principal Cybersecurity & GRC AdvisorAbout HighspringHighspring is a next-generation consulting and skilled services firm. We deliver modern, agile, and forward-thinking solutions to clients across North America. We work with leading organizations to help them address complex technology challenges, strengthen their capabilities, and deliver meaningful business impact.
At Highspring, we believe in empowering our people, fostering technical leadership, and creating opportunities for our consultants to contribute where their expertise matters most.
The OpportunityHighspring is looking for a Principal Cybersecurity & GRC Advisor to support a large-scale organization operating in a complex, highly regulated technology environment.
In this role, you will serve as a trusted cybersecurity expert and strategic advisor to technology, business, and leadership teams. You will help align business objectives, security requirements, regulatory obligations, and risk priorities to guide technology decisions and protect critical organizational assets.
You will collaborate across a highly matrixed environment, advising managers, architects, technology teams, and project leaders to ensure decisions are secure, practical, and aligned with business priorities.
What You’ll DoAct as a lead cybersecurity expert across strategic technology domains.
Bridge business requirements, cybersecurity needs, regulatory obligations, and organizational risk priorities.
Evaluate and approve cybersecurity risk assessments, technology architectures, and risk mitigation strategies.
Contribute to the evolution of cybersecurity standards, policies, and governance frameworks.
Participate in architecture, governance, and risk management committees.
Advise business and technology teams on information security and cybersecurity best practices.
Support technology transformation, modernization,



and innovation initiatives.
Monitor emerging cyber threats, evolving regulations, and relevant industry trends.
What You Bring to the TableBachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.15+ years of experience in information security or cybersecurity.
Strong understanding of cybersecurity risk management, security governance, and enterprise architecture.
Hands-on experience conducting cybersecurity risk assessments and managing technology risk.
Ability to communicate effectively with both highly technical teams and business leaders.
Core Skills RequiredCybersecurity governance, risk, and compliance (GRC)Cybersecurity risk assessment and risk managementInformation security governanceEnterprise architecture and technology riskSecurity policies, standards, and governance frameworksStakeholder management and executive-level advisoryTechnology transformation and modernizationRegulatory and security requirementsCross-functional leadership and influencing without direct authorityPreferred qualifications and

experience:
CISSP, CISM, CISA, or equivalent cybersecurity certification.
Familiarity with NIST, ISO 27001, CMMC, or comparable cybersecurity frameworks.
Collaborate with business and technical stakeholders on strategic cybersecurity challenges.
Access continuous learning, certification, and training opportunities.
Be part of a collaborative culture that values technical expertise, sound judgment,



and meaningful business impact.
Conseiller(ère) principal(e), Cybersécurité et GRC/ SeniorÀ propos de HighspringHighspring est une firme de services-conseils et de services professionnels de nouvelle génération. Chez Highspring, nous croyons à l’autonomie de nos professionnels, au leadership technique et à la possibilité pour nos consultants de contribuer à des mandats où leur expertise fait réellement la différence.
L’opportunitéHighspring recherche un(e) Conseiller(ère) principal(e), Cybersécurité et GRC afin d’accompagner une organisation d’envergure évoluant dans un environnement technologique complexe et hautement réglementé.
Dans ce rôle, vous agirez à titre d’expert(e) de confiance en cybersécurité et de conseiller(ère) stratégique auprès des équipes technologiques, des équipes d’affaires et des gestionnaires. Ce que vous ferezAgir à titre d’expert(e) principal(e) en cybersécurité pour des domaines technologiques stratégiques.
Faire le pont entre les besoins d’affaires, les exigences de cybersécurité, les obligations réglementaires et les priorités organisationnelles en matière de risques.
Évaluer et approuver les analyses de risques en cybersécurité, les architectures technologiques et les stratégies d’atténuation des risques.
Contribuer à l’évolution des normes, politiques et cadres de gouvernance en cybersécurité.
Participer aux comités d’architecture, de gouvernance et de gestion des risques.
Conseiller les équipes d’affaires et technologiques sur les bonnes pratiques en matière de sécurité de l’information et de cybersécurité.
Soutenir les initiatives de transformation, de modernisation et d’innovation technologiques.
Ce que vous apportezBacc

📌 Architecte Cybersécurité (Canada)
🏢 Important Group
📍 Canada