Manager, Cyber & Technology Risk Management

Make an impact at a global and dynamic investment organization

When you join CPP Investments, you are joining one of the world’s most admired and respected institutional investors. As a professional investment management organization, CPP Investments invests the funds of the Canada Pension Plan (CPP) to help ensure its financial sustainability for generations of working and retired Canadians.

CPP Investments invests across regions and asset classes to build a globally diversified portfolio. It holds assets in public equity, private equity, real estate, infrastructure, and fixed income, and the CPP Fund is projected to reach $3.6trillion in assets by 2050. The organization is headquartered in Toronto with offices in Hong Kong, London, Mumbai, New York City, São Paulo, and Sydney.

CPP Investments successfully attracts, selects, and retains talented individuals from top-tier institutions worldwide. Join our team for access to:

• Stimulating work in a fast-paced and intellectually challenging environment
• Accelerated exposure and responsibility
• Global career development opportunities
• Diverse and inspiring colleagues and approachable leaders
• A hybrid-flexible work environment with an emphasis on in-person collaboration
• A culture rooted in principles of integrity, partnership, and high performance
• An organization with an important social purpose that positively impacts lives

If you have a passion for performance, value a collegial and collaborative culture, and approach work with the highest integrity, invest your career here.

Reporting to the Managing Director, Cyber & Technology Risk Management, this Cyber and Technology Risk Manager role will be focused on mitigating cyber, technology, and data risks by assisting in the implementation of a risk management and internal control framework with particular focus on the Technology & Data (T&D) and Information Security (Infosec) departments.

In this role, you will be responsible for working collaboratively with the T&D and Infosec teams to identify, assess, and mitigate risks to the fund’s information systems, data, and infrastructure; and instill a risk and control discipline through education, consultation, and the development of risk management capabilities across core activities.

Cyber & Technology Risk Management is the frontline risk partner within the Information & Corporate Security function, working closely with Technology & Data (T&D), Information Security, and business teams to strengthen CPP Investments’ resilience and safeguard critical information and platforms. We provide an enterprise‑wide view of technology and cyber risk for senior leadership and steward the practices and governance that enable secure, reliable delivery of business outcomes.

• Developing and implementing cyber and technology risk management processes and capabilities to protect the organization’s critical information assets and systems
• Enabling regular insights via KRIs and other means, to senior leaders and other stakeholders on the fund’s cyber and technology risk posture
• Supporting the enhancement and implementation of a 1st line of defense risk and control assessment capability
• Support the development and updating of key documentation (e.g., standards, guidelines, etc.) to support T&D and Infosec processes and address fund-wide risks
• Facilitate the establishment of necessary standards and the associated governance and monitoring to ensure adherence and manage exceptions
• Support and lead on-time completion of action plans that address findings from Audits and reviews across the 3 lines of defense
• Identifying risks and partnering with colleagues from Legal, Compliance, Risk, T&D, and Infosec to implement solutions to mitigate them

This role will support the cultivation of the best view of Cyber and Technology risks across the fund through active partnership with T&D teams, Enterprise Risk, Audit, and other groups; and will support the Cyber and Technology Risk Management team in leading enterprise initiatives to address transversal risks impacting the enterprise.

You will support the team to work collaboratively with Enterprise and Operational…